Spammed Messages Purportedly from BoBijou Found
April 25, 2011
Trendlabs engineers have discovered a slew of spammed messages that contain malicious attachments. The mail's body passes itself off as a message coming from BoBijou Inc., a company renowned for exclusive contemporary jewelry. It states that the recipient made online purchases and that the details and delivery information are in the attached file. This attack used a technique known as a dictionary attack in order to generate a recipient list. Dictionary attacks use all of the terms in the dictionary and combine them with a domain name to generate an address list. The malicious file attachment has been detected by Trend Micro as TROJ_DLOADR.ZZJ. Users should not open suspicious looking mails and their attachments.
SPAM BLOCKING DATE / TIME: April 25, 2011 GMT-8