Fake Western Union emails deliver Trojan

There’s a new wave of spam hitting inboxes and with it comes a dangerous payload. The spam messages carry the subject line “Western Union Transfer MTCN:” and a random number. The body of the message is an official looking notification that the large sum of money that was transferred on March 10 was never picked up, so for a refund simply print out the invoice in the included attachment and bring it to your local WU office. It even has a little signature that says the message has been virus scanned and deemed safe.

Wow, free money, right? Wrong. That’s what the scammer wants you to think. He’s hoping your greed will outweigh your common sense so you’ll click on the attachment and open the zip file. When you do a nasty Trojan will install itself on your computer.

The Trojan, Troj/Agent-JUC, appears to be a rootkit that disables firewalls and steals banking information. It also installs other malware including a keylogger program, takes screenshots, and provides backdoor access to the systems it infects.

The key to protection here is common sense. Don’t open any attachments you get from people you don’t know, and treat the ones that come from people you do know with caution and run a virus scan on them before opening. These scammers are looking to prey on people who’ve been hit hard by the economy and are desperate for a windfall. Don’t fall for it!

Read [SpamFighterNews]