Activation Key malware morphs its disguise
Earlier this week I told you about a widespread spam campaign with a malicious attachment that posed as a message about account activation keys.
I'm afraid that the hackers are still spewing out their attack at a frenzied rate, with many many instances being seen in our spam traps worldwide. Furthermore, the criminals behind this attempt to infect your PC have adapted their disguise a little.
Here is an example of some of the latest emails we have been seeing:
In these latest cases, the subject line is still "The Activation Keys" but the attached file is now called new_activation_keys.zip.
Another version being seen at our global network of spam monitoring stations uses the subject line "Recovery KEYS for your account" with the attached file The_keys.zip.
As before, you should not open these files as they contain a malicious Trojan horse (detected by Sophos as Troj/Agent-IDL or Troj/Invo-Zip).
Posted on November 6th, 2008 by Graham Cluley, SophosFiled under: Malware, Spam
Windows 7 security - A great leap forward or business as usual?
