FW: Check the attachment you have to react somehow to this picture

This spammed message informs users about online photos that they have to comment or react to. The subject, FW: check the attachment you have read to react somehow to this picture piques users’ interest in opening the said email message. The attachment is a. ZIP file with a file name IMG9062.zip similar to file names generated for digital photos, making the attachment look harmless and legitimagte. In reality, the attachment contains an exceutable file (.EXE) detected by Trend Micro as TROJ_KRYPTIK.AE.

Users are advised to only open attachments that are from known and trusted sources.