Remember the UPS spam runs that were popular last month (see previous blog posts here and here)? Spammers have chosen a different courier this time, but the message was basically the same:
Posing as FedEx notifications, these email messages have the same format as their earlier UPS counterparts: tracking number (perhaps to make the message appear authentic), message body informing recipients that there was a problem with the delivery of a package, and a message urging the recipient to print the attached “invoice” to claim the “package”.
Even the attachment is of the same file type as those seen in the previous spam runs. The .ZIP file is an info stealer detected by Trend Micro as TSPY_ZBOT.MCS. ZBOT spyware are infamous keyloggers that are known to steal confidential information, such as those related to online banking credentials.
Our users are already protected by the Trend Micro Smart Protection Network. While our experts are still doing their analysis on this case, everyone should remember that nothing is free these days – even if malicious emails posing as the world’s largest couriers tell you otherwise.
If you're new here, you may want to subscribe to our RSS feed. Thanks for visiting!
August 22nd, 2008 at 11:32 pm
[...] Bogus FedEx Notifications: New Malware Courier of Choice [TrendLabs] [...]
August 27th, 2008 at 3:20 pm
[...] http://blog.trendmicro.com/bogus-fedex-notifications-new-malware-courier-of-choice/ [...]
August 27th, 2008 at 3:31 pm
[...] http://blog.trendmicro.com/bogus-fedex-notifications-new-malware-courier-of-choice/ [...]
September 19th, 2008 at 6:58 pm
[...] last month see previous blog posts here and here? Spammers have chosen a different courier this timehttp://blog.trendmicro.com/bogus-fedex-notifications-new-malware-courier-of-choice/UPS Email VirusWatch out for this. Email looks original. If you need to track a package go to the [...]
January 29th, 2009 at 5:02 pm
[...] 26-1-2009 Bogus diplomas a stain on New Jersey educators Saved by samwise23 on Sat 24-1-2009 Bogus FedEx Notifications: New Malware Courier of Choice Saved by kujyakumai24 on Sat 17-1-2009 Gas tax diversions get legislators’ attention, so does [...]