Cybercriminals are using the massive spam campaign to distribute a Trojan

Mar 8, 2013 15:22 GMT  ·  By

Internet users from Germany are advised to beware of emails that purport to come from a shipping company called First Class Zollservice.

Entitled “Luftfrachsendung AWB,” which means “Airfreight shipment AWB,” the emails attempt to trick users into opening an attachment called “AWB-Avis 123-12345678.pdf.zip.” According to Sophos experts, the archive contains a Trojan horse identified as Troj/Agent-AANK.

“Hi, Please confirm the enclosed AWB is OK. Thank you. Yours sincerely,” the malicious emails read in a bad German.

Sophos reveals that the spam campaign is much larger than any other observed by the company over the past days. In fact, it’s so big that First Class Zollservice has been forced to shut down its “info” email address.

The company informs customers on its website that they can use the [email protected] address to get in touch with them until further notice.