Vodafone Hutchison Australia: Your Account Balance
This spammed message looks professional and legitimate, complete with Vodafone logo and branding. It enters through users' personal emails and and poses as an account balance notification with a .ZIP file attachment named Vodafone-Account_BalanceID2882054
The problem comes in when users download and extract from these attachment, which actually contains malicious files TROJ_INJECT.CCK, WORM_MYDOOM.GEN and WORM_NETSKY.DAM. These malware can create copies of themselves on the system and execute malicious routines.
Users should remain vigilant, especially as more spammed mails are spoofing legitimate sites today. Keep email usage safe by opening and clicking links only from those that you expect to come in.