The malicious emails have been making the rounds since March

Apr 18, 2013 19:01 GMT  ·  By

Security firm Kaspersky has published its spam report for March 2013. One of the malicious spam campaigns detailed in the report leverages the name of Australian telecoms company TPG Telecom in an effort to distribute a variant of the notorious ZeuS Trojan.

Bearing the subject “Restoration of Mobile Phone Deposit,” the fake emails read something like this:

“Dear Customer,

The balance of your Mobile Phone Deposit has dropped below $5.00, and we have initiated a debit of $16.95 to restore the balance to $20.00. Please refer to the attached report with detailed status of your account.

Thank you for using the TPG mobile phone service. Your customer ID is 5212306”

The file attached to these malicious emails appears to be a harmless document. However, in reality, it’s an executable that has been identified by Kaspersky as Trojan-Spy.Win32.Zbot.jqye, a threat designed to steal sensitive information from infected computers.

It’s worth noting that Trojan-Spy.Win32.Zbot.jqye is one of the most famous ZeuS variants.

If you come across such emails, be sure to ignore them. If you’ve already opened the attachment, scan your system immediately with an updated antivirus solution.