Spammed Messages Purportedly from BoBijou Found

Trendlabs engineers have discovered a slew of spammed messages that contain malicious attachments. The mail's body passes itself off as a message coming from BoBijou Inc., a company renowned for exclusive contemporary jewelry. It states that the recipient made online purchases and that the details and delivery information are in the attached file. This attack used a technique known as a dictionary attack in order to generate a recipient list. Dictionary attacks use all of the terms in the dictionary and combine them with a domain name to generate an address list. The malicious file attachment has been detected by Trend Micro as TROJ_DLOADR.ZZJ. Users should not open suspicious looking mails and their attachments.