Beware of spammed email messages claiming to be from Trend Micro but come from a bogus email address, include a subject line totally unrelated to Trend Micro’s business, and include within the grammatically flawed message a link to a domain name that is not an official Trend Micro URL. Phishing attacks like these are not unusual and rogue anti-spyware is common.

TrendLabs received reports today of this spammed email message, which entices users to download a supposedly free trial version of Trend Micro Anti-Spyware software by clicking on a link. The said link opens a fake Trend Micro Web site, as seen below:

Clicking on the links found on these pages eventually leads to the downloading of a Trojan detected as TROJ_DROPPER.CNH. This Trojan, in turn, downloads a spyware detected as TSPY_AGENT.YZR.

Trend Micro already blocks the malicious Web page with its In-the-cloud URL Filtering Service, and detects the malware files with the latest pattern file 4.695.00. Trend Micro users who may have been affected by this phishing attempt can also automatically remove the malware files and restore their systems using GeneriClean.

TrendLabs advises users and customers to be wary of all spammed messages like this because they could contain Web threats. If you wish to download any Trend Micro software, we highly recommend that you type in directly the correct URL, http://www.trendmicro.com, in the address bar of your browser instead of clicking links from unsolicited email messages.

UPDATE: The said phishing Web site has since been taken down.

If you're new here, you may want to subscribe to our RSS feed. Thanks for visiting!