Similar Searches

Related Posts

  • Malicious Web Site / Malicious Code: Malicious Google Job Application Response (January 31, 2010)

    Websense Security Labs™ ThreatSeeker™ Network has discovered a new malicious spam campaign that spoofs Google job application responses. The messages look very well written and are so believable that they are probably scrapes from actual Google job application responses. Typically, spam has grammatical errors or spelling mistakes that make the ...

  • Spammers Target Antivirus Companies (March 1, 2010)

    A new wave of spammed messages posing as mail service notifications targeted antivirus companies, including Trend Micro. These messages ask the receivers to update their mailbox settings by opening and executing the attachment. The two samples above TrendLabs ...

  • Christmas Greetings from Spammers (December 25, 2009)

    Spammers are clearly putting the holidays to good use, as they have made Christmas just another reason to spread malware. Trend Micro threat analysts recently received a spammed message purporting to come from 123greetings.com, a legitimate site that users can access to send e-cards to family and friends. The email message ...

  • The Buzz on Google Buzz Malware (March 1, 2010)

    Google recently announced its latest service Google Buzz, which is considered as the company’s first step in entering the social-networking scene. Naturally, hordes of Internet users became interested in the new application. But such buzz also gained unwanted attention from cybercriminals who already used the service ...

  • Spammers Recommend Malicious Plans for the Crisis (March 11, 2009)

    With the current global economic crisis, it is safe to assume that corporations are probably trying to solicit as many ideas as possible from their work force to help improve their business. Quite unfortunately, it is through this that spammers are trying to solicit victims of their illicit scheme, as ...

Related News

Related Posts

  • Malicious Web Site / Malicious Code: Malicious Google Job Application Response (January 31, 2010)

    Websense Security Labs™ ThreatSeeker™ Network has discovered a new malicious spam campaign that spoofs Google job application responses. The messages look very well written and are so believable that they are probably scrapes from actual Google job application responses. Typically, spam has grammatical errors or spelling mistakes that make the ...

  • Spammers Target Antivirus Companies (March 1, 2010)

    A new wave of spammed messages posing as mail service notifications targeted antivirus companies, including Trend Micro. These messages ask the receivers to update their mailbox settings by opening and executing the attachment. The two samples above TrendLabs ...

  • Christmas Greetings from Spammers (December 25, 2009)

    Spammers are clearly putting the holidays to good use, as they have made Christmas just another reason to spread malware. Trend Micro threat analysts recently received a spammed message purporting to come from 123greetings.com, a legitimate site that users can access to send e-cards to family and friends. The email message ...

  • The Buzz on Google Buzz Malware (March 1, 2010)

    Google recently announced its latest service Google Buzz, which is considered as the company’s first step in entering the social-networking scene. Naturally, hordes of Internet users became interested in the new application. But such buzz also gained unwanted attention from cybercriminals who already used the service ...

  • Spammers Recommend Malicious Plans for the Crisis (March 11, 2009)

    With the current global economic crisis, it is safe to assume that corporations are probably trying to solicit as many ideas as possible from their work force to help improve their business. Quite unfortunately, it is through this that spammers are trying to solicit victims of their illicit scheme, as ...

Spammers Fake Responses from Google Job Applications

A new spam campaign gives the phrase “too good to be true” a whole new spin: spammed messages purporting to come from Google in response to job applications. While most spammed messages take advantage of a specific special occasion, holiday, or even a currently newsworthy item, spammers have hit a new low with their latest scheme.

Taking the form of job application responses from Google, the email even sports the official Google logo with an accompanied legitimate From: address. With close-to-perfect grammar and syntax (unlike most known spammed messages), it is becoming even trickier to distinguish real email messages from fake ones. And why would users not want to believe what the message says? Google has always been commended for being a more-than-ideal workplace. Receiving word regarding a job application from the company is thus great news indeed. But is viewing a suspicious-looking email message, especially if you did not even send an application in the first place, worth infecting your computer?

The latter part of the spammed message is even more suspicious, as it asks the recipient to download a .ZIP file attachment, CV-20100120-112.ZIP, which then opens a prompt to download the file with a different name (document.doc) and a hidden extension (.EXE), detected by Trend Micro as WORM_SPYBOT.MCP.

Cybercriminals have also been known to make use of spaces to hide the real extension names of file attachments.

...
Read the original story


Source: Danielle Veluz (Technical Communications) @ TrendLabs | Malware Blog - by Trend Micro

Write a Comment

Copyright © 2010 The Security Blog. All rights reserved.
Web Statistics Homeland Security blogs & blog posts