Fake FDIC Message Leads to Malware

Spammers are out there again with their tricks. This time, TrendLabs found samples of spam purportedly coming from the Federal Deposit Insurance Corporation (FDIC). FDIC is an independent agency of the federal government of the United States.

In the said samples, the fake sender claims that the recipients provided his/her email addresses upon opening a bank account, thus the email. The mails then advise recipients that the attached .ZIP file is a document regarding current regulation changes. The samples also contain the official FDIC logo. Users may be tricked into thinking that these messages are legitimate and may open the attachment.

Trend Micro detects the said attachment as TSPY_OFICLA.MESY.