A million dollars, even when already burnt to a crisp, proves to be irresistible to some people.
Trend Micro has been seeing a large number of users affected by malware distributed through a spammed email message, which carries bank robbery video footage in which a million dollars supposedly got incinerated.
The news is, of course, false, but still seems to entice recipients to watch the bogus video.
Below is a screenshot of the spammed message:
The email comes with two attachments: a non-malicious .HTML file (file name in Japanese characters), and a Video.rar attachment, which is supposed to be the video footage of the robbery. It contains the executable file My.YouTube.Movie.avi.exe, which is detected by Trend Micro as TROJ_DISKEN.K.
But the trouble doesn’t stop there.
JOKE_BLUESCREEN is a joke program that tricks the user by modifying the system screen saver to one that is similar to a BSOD.
TROJ_FAKEAV.IE on the other hand is a rogue antivirus, thus adding this attack to the string of rogue antivirus-related attacks that has surfaced in the past months.
Trend Micro users are now protected from this attack through the Smart Protection Network. Other users are advised to be cautious of unsolicited and unexpected messages.