Spammers deliver bogus invoices

According to researchers at McAfee, a new round of malware-laden spam messages using the cover of a package tracking invoice have been discovered.

The messages tell the user that a package sent on July 1 could not be delivered and that the user should open the attacked file and collect the package from a local post office.

When the user loads the supposed invoice, however, the malware attack is launched. The attached .zip archive unloads a .exe trojan file, which then unpacks a spyware program designed to steal user data for several job recruiting sites.

The majority of the spam messages have attempted to impersonate UPS, though the company has also found examples purporting to be from the US customs service.

McAfee has tied the same trojan to another attack which targets the user with a fraudulent receipt for an airplane reservation.

The company believes that the spam run will continue for several more days and is advising users to avoid visiting any suspicious URLs and not to launch any unexpected or suspicious email attachments.

Copyright ©v3.co.uk

bogusdeliversecurityspammers