This spammed message informs users that the Better Business Bureau allegedly received a complaint from one of the users' customers. The message spoofs the Better Business Bureau to add a sense of legitimacy to the claim. The message informs users that an attached file is included, containing information about the customer complaint. The attached file is a .ZIP file with a file name BBB report.zip. However, the attachment actually contains an executable file (.EXE) detected by Trend Micro as TROJ_INJECTO.VE.


Figure 1. Attachment contains a malicious file

Users are advised to open attachments only from known and trusted sources.
 Spam Blocking Date/Time: : 03 mai 2012 GMT-8
 TMASE
  • TMASE Engine: :
  • Patrón TMASE: atures du moteur TMASE: :8882