Emailed contracts carrying Trojans

Posted on 2 Dec 2008 at 10:30

Security experts have issued a warning after detecting a deluge of malicious spam purporting to contain 'official contract' documents from companies including Apple, FedEx, Google and Starbucks.

Instead of containing any contractual information, the emails carry an attachment file, 'New_Contract.zip', which is in fact a malicious Trojan. The malware is identified by security firm Sophos as Troj/Invo-Zip.

Some of the subject lines being used by the spammers distributing this malware include:

Procter & Gamble Contract of order fulfilment
Toyota Permit for retirement
General Electric Lease contract
Berkshire Hathaway Loan Contract
Southwest Airlines Contract of settlements
Procter & Gamble Contract direct marketing
Johnson & Johnson Contract e-fulfilment
Starbucks Lending Contract
Apple Contract of retirement
FedEx Contract direct marketing
Google Lease contract

"Even if you weren't involved in any business dealings with the above companies you might still be curious enough to open the attachment to see what it contains," said Graham Cluley, senior technology consultant at Sophos.

"It is that curiosity which the cyber-criminals are depending on in order to infect your computer, and potentially steal information, resources and money from you - so don't make it easy for them. Just delete the messages if you receive them."

Author: Robert Jaques

Get more reviews, tutorials and in-depth advice, every month with Computer Shopper.
Click here to try 3 issues for £1

< Previous News : General Next >

Be the first to comment on this article

You need to Login or Register to comment.