The news report entices victims to click on an attached Word document and read the latest about the tragedy.
However, opening the Word document attached triggers an exploit which silently downloads a Trojan horse (known as Troj/MalDoc-Fam) onto the user's computer.
According to Sophos, hackers can then use this to steal sensitive and confidential information for financial gain and to commit identity theft.
"Over the last few weeks, we've already seen several examples of cybercriminals trying to exploit the natural disasters suffered by China and Burma, and it seems there's no end to their tactics," said Graham Cluley, senior technology consultant at Sophos
Computer users should be aware not to click on unsolicited emails, no matter how tempting the subject line or content, said Sophos.
Below is an example of the spam email:
BEIJING, May 20 (Xinhua) -- The death toll from the earthquake in southwest China's Sichuan Province has risen to 34,074 nationwide as of 2p.m. Saturday, while 198,347 people were injured, according to the Information
Cybercriminals feed off China earthquake disaster
A new spam email purporting to be a news report about China’s recent earthquake can install a malicious Trojan if its attachment is opened, warned Sophos.
Add iTnews as your trusted source
Got a news tip for our journalists? Share it with us anonymously here.
Partner Content
.png&h=140&w=231&c=1&s=0)
Promoted Content
From ambition to impact: The next era of government transformation.
.jpg&h=140&w=231&c=1&s=0)
Promoted Content
The AI era demands a new kind of network
iTnews State of Security Breakfast comes to Sydney
.jpg&h=140&w=231&c=1&s=0)
Partner Content
From data overload to decisive action – accelerating decisions with AI agents
What’s Next?
Cloud Resilience Summit
iTnews Benchmark Security Awards 2026
iTnews State of Security Breakfast Sydney
iTnews Executive Retreat - Security Leaders Edition - VIC
