ZBOT/ZEUS Now Attached in Fake Notification Messages

The recent spam attacks using the variant of ZBOT/ZEUS malware called ZBERP involve spammed messages containing links which download a zip file containing ZBERP. The mails, pretending to be notifications from UPS, contain not only links for the malware but also an attachment disguised as a PDF file. ZBERP is malware that has combined characteristics of ZBOT/ZEUS and CARBERP - both of which are designed to steal user information.

Trend Micro products detect and block messages from these spam campaigns. Malware attachments are also blocked and detected even before its execution in the computer.

• TMASE Engine::7.5
• Patrón TMASE: 0580