Spammed Messages Purportedly from BoBijou Found

 Analysis by: Mary Aquino

Trendlabs engineers have discovered a slew of spammed messages that contain malicious attachments. The mail's body passes itself off as a message coming from BoBijou Inc., a company renowned for exclusive contemporary jewelry. It states that the recipient made online purchases and that the details and delivery information are in the attached file. This attack used a technique known as a dictionary attack in order to generate a recipient list. Dictionary attacks use all of the terms in the dictionary and combine them with a domain name to generate an address list. The malicious file attachment has been detected by Trend Micro as TROJ_DLOADR.ZZJ. Users should not open suspicious looking mails and their attachments.
 SPAM BLOCKING DATE / TIME: April 25, 2011 GMT-8
 TMASE INFO
  • ENGINE:6.5
  • PATTERN:8096

Related Malware