This spammed message claims to come from an automated craigslist mail. It simply tricks employees, clients, or any working professional to open a .ZIP file attachment that contains a report for next day's meeting.

The attachment contains malware, which Trend Micro detects as TROJ_KRYPTIK.MWU. When executed, this Trojan drops copies of itself and automatically runs on startup.

Users are advised to not open attachments or click links from emails sent by people unknown to them.

 SPAM BLOCKING DATE / TIME: July 10, 2012 GMT-8
 TMASE INFO
  • ENGINE:
  • PATTERN:9032

Related Malware