Phony email message claims Sony laptop is on the way.
Security researchers at SophosLabs have discovered yet another new phishing campaign aimed at users of Amazon .com. A fraudulent Amazon email message claims a Sony VAIO A1133651A laptop has been ordered and is being shipped. The email includes an attached file that supposedly contains the tracking information for the customer.
There’s no surprise at what happens next. Opening the attached file (track.zip) includes an embedded Trojan Horse. In his blog, Graham Cluley of Sophos said the scareware program is designed to look like fake antivirus software.
Of course, this tactic is nothing new. But clearly cybercriminals think it is still an effective route to achieve their goal – to infect as many computers as possible with their malware.
We’ve written about rogue antivirus a number of times in the past. In December, the FBI warned that rogue antivirus losses are exceeding $150 million. Symantec issued a report last year on the scareware phenomenon. In a one year period, Symantec said it documented 43 million rogue security software attempts. It identified more than 250 different flavors of rogue antivirus.
– Matthew DeBarros