A new smart way social engineering spam began to circulate today. It's a new attempt by rogue people to trick their victims to download malware on their computers.
Scammers use names from various well-known security companies to make the email the end user receives look more real. Their goal, as we mentioned above, is to install the malware on the victim's computer, which comes with an attached patch archive of a supposedly urgent security software update.
Η Symantec has recorded some from the topics of the messages:
- AntiVir Desktop: Important System Update - requires immediate action
- Avast Antivirus: Important System Update – requires immediate action
- AVG Anti-Virus Free Edition: Important System Update – requires immediate action
- Avira Desktop: Important System Update - requires immediate action
- Baidu Antivirus: Important System Update - requires immediate action
- Cloud Antivirus Firewall: Important System Update - requires immediate action
- ESET NOD32 Antivirus: Important System Update – requires immediate action
- Kaspersky Anti-Virus: Important System Update - requires immediate action
- McAfee Personal Firewall: Important System Update - requires immediate action
- Norton AntiVirus: Important System Update - requires immediate action
- Norton Internet Security: Important System Update - requires immediate action
- Norton 360: Important System Update - requires immediate action
- Symantec Endpoint Protection: Important System Update – requires immediate action
- Trend Micro Titanium Internet Security: Important System Update - requires immediate action
Although the subject is changing, the attached zip file containing the malware is the same.
Once malware is running, it is linked to [http: //] networksecurityx.hopto.org to download another file.
If you see any of these emails stay away. Of course, you should always be suspicious if there are attachments from recipients you do not know.