Malware spammed out as report for “tomorrow’s meeting”

Meeting in calendar. Image from ShutterstockHave you received an email telling you not to forget to bring a report to a meeting being held tomorrow?

Be on your guard.

SophosLabs is intercepting a malware campaign that has been widely spammed out across the internet, using just such a disguise.

Attached to the emails, which have a subject line of “Don’t forget about a meeting tomorrow” is a file called Report.zip, which harbours the malware.

Sign up to our free newsletter.
Security news, advice, and tips.

Here’s what a typical email looks like:

Malicious meeting email

Interestingly, the spelling of the email’s message body can vary – presumably this was done in an attempt to avoid rudimentary email filters which might attempt to block messages.

Here are some of the variations we’ve seen:

Don't forget this report for meeting tomrorow.
See attached file.

Don't forget this report for meteing tmoorrow.
See attached file.

Don't forget this report for meeting toomrrow.
See attached file.

Don't forget this report for meeitng tomrorow.
See attached file.

Recipients might think the typos are the result of someone writing too quickly, or fumbling on their BlackBerry, rather than an attempt to bypass a company’s email gateway protection.

The misspelling hasn’t been enough to fool Sophos’s products however, which correctly intercept the messages as spam and identifies the attached file as Troj/Invo-Zip.

Be on your guard against such tricks, and always think carefully before opening unsolicited email attachments.

Meeting in calendar image, courtesy of Shutterstock.


Graham Cluley is an award-winning keynote speaker who has given presentations around the world about cybersecurity, hackers, and online privacy. A veteran of the computer security industry since the early 1990s, he wrote the first ever version of Dr Solomon's Anti-Virus Toolkit for Windows, makes regular media appearances, and is the co-host of the popular "Smashing Security" podcast. Follow him on Twitter, Mastodon, Threads, Bluesky, or drop him an email.

What do you think? Leave a comment

Your email address will not be published. Required fields are marked *

This site uses Akismet to reduce spam. Learn how your comment data is processed.