Malware hiding behind phony Fedex messages

www.sophos.com

Security experts are issuing warnings following the discovery of a malware scam using email attachments.

The attack uses emails claiming to be from delivery service FedEx. The message claims that the user was unable to receive a package due to an address error and instructs users to print out an attached form to claim the package.

The attachment, however, contains a malicious .zip file which when opened triggers the malware attack. Security firm Sunbelt Software identified the malwareas  zbot.

Sophos senior technology consultant Graham Cluley said that the attack shows an interesting twist on the common tactic of hiding malware trojans as e-mail attachments.

"Unlike many of the other Fedex-related malware attacks we have seen in the past, the emails carry the message about the failed delivery in the form of an image rather than text, possibly in an attempt to try and defeat more rudimentary anti-spam filters," Cluley said in a blog post.

Users are being advised to use common security best practices such as avoiding suspicious messages and not loading unknown or suspicious file attachments.

Malware
Malware is software such as viruses or Trojans designed to cause damage or disruption to a computer system.
It is defined as: 
any set of computer instructions that are designed to modify, damage, destroy,record, or transmit information within a computer, computer system, or computer
network without the intent or permission of the owner of the information. They include, but are not limited to, a group of computer instructions commonly called viruses or worms, that are self-replicating or self-propagating and are designed to contaminate other computer programs or computer data, consume computer resources, modify, destroy, record, or transmit data, or in some other fashion the normal operation of the computer, computer system, or computer
network.
Because this is the case in U.S and the punishment for violating this section of the penal code can be a fine of up to $10,000 or imprisonment for up to one year or both.The punishment severity is based on whether there was injury to the victim,or if there were prior offenses of the same nature.

Source:

"Malware Hiding behind Phony Fedex Messages - V3.co.uk - Formerly Vnunet.com." UK Technology News, Reviews and Analysis - V3.co.uk. Web. 27 Aug. 2010.