November 11, 2008"Contract" Malware Lure
This is pretty flimsy, but many a struggling small business owner or manager might be fooled into opening the attached file, Contract.zip:
From: MSU ltd.
Subject: Record in debit of account
We have already made ready the contract and we also joined some points you'd asked to add to it.
The lawyers change some points on the last page. Read the contract, please, and if there are no objections from your part we can pay for the first batch on Friday.
You can find the contract in the attached ZIP Archive.
We also ready to send it by fax if you need
Expecting for your decision
According to a VirusTotal scan, most of the major antivirus products catch this malware loader, assuming that recipients' AV software is up to date.
Whenever you see a paperclip (attachment) icon next to an item in your inbox—regardless of sender—it's time to go on HIGH ALERT.Posted on November 11, 2008 at 07:35 AM