Cybercriminals are attempting to infect email users by spamming out a malware attack, posing as a gift card from a friend.
SophosLabs has intercepted a malicious spam campaign that has hit inboxes around the world, with a Trojan horse attached as a .PIF file.
Subject: GIFT-CARD FOR YOU [number]
Attached file: gift-card.pifMessage body:
Hello! You Received GiftCard From your Friend,
Check it in AttachedWith Best Regards,
Giftcard.com
Another version, with slight wording and typographical differences, reads:
Subject: GIFT-CARD From Your Friend [number]
Attached file: gift-card.pifMessage body:
Hi! You Received GiftCard From your Friend,Check it in Attached
With Best Wishes,
giftCard.com
Many Windows users may not realise that just because a file has a .PIF extension doesn’t make it any less executable, or any less of a risk to their computer. Opening the file will infect unprotected Windows computers with the Troj/Agent-RNY Trojan horse.
The only defence for users is an up-to-date anti-virus product and a healthy skepticism about unsolicited emails which arrive out of the blue in their inbox.
