New
#1
Zbot Spam Claims Email Accounts Were Deactivated
Zbot Spam Claims Email Accounts Were Deactivated
The malicious attachment contains a trojan downloader
Malware distributors are hard at work again to infect computer users with the notorious Zeus banking trojan. Their newest spam campaign informs users that their email accounts have been deactivated and instructs them to run an infected file.
The malicious emails come with a "your mailbox has been deactivated" subject and claim that the user is being contacted in regards to unusual activity identified on their mailbox. "As a result, your mailbox has been deactivated. To restore your mailbox, you are required to extract and run the attached mailbox utility," the messages read.
One notable social engineering component used in this campaign is that emails are forged to appear as arriving from a notifications@ address with the same domain as the user's account. Therefore, if someone's email address is something@example.com, the spam mail will have its From field spoofed to be notifications@example.com.
FULL STORY
Zbot Spam Claims Email Accounts Were Deactivated - The malicious attachment contains a trojan downloader - Softpedia
Quote
