MX Lab intercepted several messages with a new trojan variant attached in a ZIP archive. The email messages are from an alleged internet shop where an order has been placed. The tracking number of the postal parcel has been attached according to the sender.
In fact, the ZIP archive contains an executable that is identified as TrojanDownloader:Win32/Bredolab.X [...]
Bredolab.X trojan hidden in tracking details from an internet store
New DHL trojan variant in the wild
MX Lab has intercepted messages with the subject line “DHL Delivery problem NR ****”, where **** stands for random generated characters, probably to give the idea that these are tracking numbers of the package. The From address contains randomly choosen spoofed email addresses but no direct track to DHL.
The body of the email:
Dear customer!
We failed [...]
MX Lab Summer Sales, only €8 per mailbox per year!
MX Lab is offering the Zero Hour Anti Virus and Managed Anti Spam for your mail server for € 8 per mailbox per year. For more information visit http://www.mxlab.eu/ and contact us.
