With apologies to Dooley Wilson..
# It’s still the same old story
A fight for love or glory
A case of do or die.
The world will always welcome spammers
As time goes by.. #
Yes, the oldies are the goldies, and so long as the public are still falling for tried-and-trusted tricks why should the hackers adopt new ones?
Here’s a malicious spam campaign that we’ve seen in large numbers in the last few hours. It’s modus operandi shouldn’t be any surprise to regular readers of the Clu-blog:
The emails read as follows:
Hello!
We were not able to deliver postal package you sent on February the 23th in time because the recipient’s address is not correct.
Please print out the invoice copy attached and collect the package at our office.
Your United Postal Service
Attached to the email is a file, UPS_ID.zip, which contains the malicious Troj/Inject-FG Trojan horse. But many users…
Read more in my article on the Naked Security website.
Found this article interesting? Follow Graham Cluley on Twitter or Mastodon to read more of the exclusive content we post.
