Zbot Spam Claims Email Accounts Were Deactivated

[Peaches]

Zbot Spam Claims Email Accounts Were Deactivated

The malicious attachment contains a trojan downloader

Malware distributors are hard at work again to infect computer users with the notorious Zeus banking trojan. Their newest spam campaign informs users that their email accounts have been deactivated and instructs them to run an infected file.

The malicious emails come with a "your mailbox has been deactivated" subject and claim that the user is being contacted in regards to unusual activity identified on their mailbox. "As a result, your mailbox has been deactivated. To restore your mailbox, you are required to extract and run the attached mailbox utility," the messages read.

One notable social engineering component used in this campaign is that emails are forged to appear as arriving from a notifications@ address with the same domain as the user's account. Therefore, if someone's email address is [email protected], the spam mail will have its From field spoofed to be [email protected].

Full details at softpedia .. http://news.softpedi...ed-127272.shtml