PandaLabs by company Panda Security has discovered a new scam campaign on the Internet.
This new scam is realized through e-mail and well-timed to the start of the season of Christmas sales. The user receives an e-mail claiming to be from a false report of express mail FedEx, by which have been tricked into downloading a computer worm Kuluoz.A and fictitious antivirus program called System Progressive Protection.
“From the beginning of the season of Christmas sales all are looking for gifts for their loved ones and often buy on the Internet. Cyber criminals use this time of year to spread malicious emails designed to trick users and steal their money, “ – says Luis Corrons, Technical Director of PandaLabs.
Spam message looks like it came from the Express Mail FedEx. Message contains a link to download a ‘receipt’ for ‘send’. If the user clicks on the link, it goes to a web page where the downloaded file with a .zip called Postal Receipt. The archive contains an executable file icon Word, loads the worm variant Kuluoz.A., Which, in turn, attempts to connect to a remote server to receive commands from the hacker and perform various malicious actions on the infected computer, including launching files.
After starting the worm opens Notepad, displaying a blank page, forcing the user to believe that it opens a legitimate file. In addition, the worm downloads a fake antivirus program called System Progressive Protection, which simulates system scans. Scan report contains a number of infections found, and the program prompts the user to buy an antivirus to remove them. But this is just a ploy to steal money intended victim, as None of the infections presented in the report, in reality does not exist, and she ‘antivirus’ is false.
Cybercriminals are using new techniques of social engineering to spread malware. It does not matter what you say, do not buy and do not wait any premise: because people are naturally curious and continue to fall into such traps. The holiday season online shopping volumes are increasing, and for criminals is a great opportunity to attract a larger than normal days ‘target audience’.