By Dancho Danchev
Cybercrimianals are currently mass mailing millions of emails in an attempt to trick British Airways customers into executing the malicious attachment found in the spamvertised emails. Upon execution, the malware opens a backdoor on the infected host, allowing the cybercriminals behind the campaign to gain complete control over the infected host.
More details:
Screenshot of the spamvertised email:
Detection rate for the malicious attachment: MD5: 4a3a345c24fda6987bbe5411269e26b7 – detected by 25 out of 42 antivirus scanners as Trojan-Downloader.Win32.Andromeda.aey
Webroot SecureAnywhere users are proactively protected from this threat.
You can find more about Dancho Danchev at his LinkedIn Profile. You can also follow him on Twitter.
Pingback: Cybercriminals resume spamvertising British Airways themed E-ticket receipts, serve malware « Webroot Threat Blog – Internet Security Threat Updates from Around the World
Pingback: ‘Please confirm your U.S Airways online registration’ themed emails lead to Black Hole Exploit Kit « Webroot Threat Blog – Internet Security Threat Updates from Around the World