Malicious emails distribute malware disguised as a Word document

Apr 5, 2013 09:30 GMT  ·  By

Cybercriminals are attaching apparently innocent document files to legal-themed spam emails in an effort to trick recipients into installing a piece of malware.

According to Conrad Longmore of Dynamoo’s Blog, the emails appear to come from LinkedIn users and they’re entitled something like “Fwd: Our chances to gain a cause are better than ever.”

Two variants have been spotted so far, one coming from Malaki Brown and one from Talisha Sprague.

The first variant reads:

“We conversed with the administration representatives, and if we acknowledge our non-essential contempt for the sake of their statistics increase, the key suit will be closed due to the lack of the state interest to the action. We have executed your elucidative text for the court. Please read it carefully and if anything in it disagrees with you, let us know.”

The second looks something like this:

“We talked to the administration representatives, and if we admit our minor infringements for the sake of their statistics increase , the main cause will be closed due to the lack of the government interest to the proceedings. We have executed your explicatory text for the court. Please read it carefully and if anything in it dissatisfies you, advise us.”

Both of them carry a file entitled “Speech.doc,” which, when executed, leads to a malicious payload hosted on a Russian domain called itriopea.ru.

Users are advised to avoid opening files attached to such emails. To protect your computer against such threats, make sure that your operating system and pieces of software such as Java, Flash and Adobe Reader are always up to date.

Also, ensure that an updated antivirus solution is always running in the background.

Network administrators can check out the complete list of malicious domains and IP addresses used in this campaign on Dynamoo’s Blog.