Pay by Phone Parking Service Receipt Arrives with Malware

 Analysis by: Michael Angelo Casayuran

This is a spammed message disguised as a notification from Pay by Phone, a credit-based parking service offered by the Westminster city government. It shows an accurate outline of a parking transaction but leads users to open an attached .ZIP file. This attachment, labeled Pay_by_Phone_Parking-Receipt_717877893, contains a malicious .EXE file detected as TROJ_AGENT.DOCW.

Users are advised not to access the file and delete similar ones immediately to prevent further system damage. Always verify the accuracy of any email message received by contacting the organization directly. Trend Micro protects users from this threat by detecting the spammed message and the malicious file.

 SPAM BLOCKING DATE / TIME: November 08, 2012 GMT-8
 TMASE INFO
  • ENGINE:
  • PATTERN:9350