ZBot trojan attached to contract
July 26, 2008 1 Comment
A new variant of the ZBot trojan is attached to an email with your contract details. Possible subject lines are:
Contract of settlements
Contract of retirements
Permit for retirement
Loan contract
The contents of the message:
Dear customers,
We have prepared a contract and added the paragraphs that you wanted to see in it. Our lawyers made alterations on the last page. If you agree with all the provisions we are ready to make the payment on Friday for the first consignment. We are enclosing the file with the prepared contract. If necessary, we can send it by fax.
Looking forward to your decision.
Israel Bender
Virus Total permalink and MD5 hash: c0a907c8bf64d60bec0cce934ca60a34
The 6.0 version of Evidence Eliminator by Robinhood software on its website contains the Zbot trojan and is not detected until after install. Steer clear of it.