Posted by Virus Bulletin on May 5, 2010
Recipients made to believe they have been sent emails accidentally.
In a new campaign, spammers are sending out emails that have appear to have contracts attached to them, but which actually serve malware, Sophos's Graham Cluley reports.
The emails, which are still being sent at the time of writing, have subject lines suggesting that they contain information about a contract or a newly opened bank account. The wording of the message then gives the impression that the recipient has received the email by accident, but many will be tempted through curiosity to open the attachment anyway. Doing so, however, will cause their computer to be infected with a piece of malware, possibly the infamous Koobface worm.
The emails appear to have been sent through botnets, and a lot of them will be blocked by a good spam filter. However, there will always be emails that slip through; a combination of end-user awareness and a good anti-virus program is needed to stop those emails from causing harm.