The dumbest malware attack I’ve seen this week

When you’ve been working any length of time in the computer security business, you get pretty used to hearing from folks that the guys who write the viruses must be “evil geniuses”.

Well, not all of them are that smart.

Take this attack, for instance, which I just spotted in one of our spam traps. It wins my award for the dumbest malware attack I’ve seen this week.

Christmas malicious ecard attack, sent in March

Sign up to our free newsletter.
Security news, advice, and tips.

A Christmas card? In March? Hmm..

Okay, I’ll give the bad guys the benefit of the doubt. They do say Christmas comes earlier every year I suppose, so lets assume the hackers are just “getting in before the rush”.

Sophos detects the attached file (Christmas Card.zip) as Troj/CryptBx-ZP


Graham Cluley is an award-winning keynote speaker who has given presentations around the world about cybersecurity, hackers, and online privacy. A veteran of the computer security industry since the early 1990s, he wrote the first ever version of Dr Solomon's Anti-Virus Toolkit for Windows, makes regular media appearances, and is the co-host of the popular "Smashing Security" podcast. Follow him on Twitter, Mastodon, Threads, Bluesky, or drop him an email.

What do you think? Leave a comment

Your email address will not be published. Required fields are marked *

This site uses Akismet to reduce spam. Learn how your comment data is processed.