This spammed message claims to come from an automated craigslist mail. It simply tricks employees, clients, or any working professional to open a .ZIP file attachment that contains a report for next day's meeting.

The attachment contains malware, which Trend Micro detects as TROJ_KRYPTIK.MWU. When executed, this Trojan drops copies of itself and automatically runs on startup.

Users are advised to not open attachments or click links from emails sent by people unknown to them.

 Fecha/hora de bloqueo del spam: 10 de julio de 2012 GMT-8
 TMASE
  • Motor TMASE:
  • Patrón TMASE: 9032

Sobre el malware