"Successful Order" malware spam

A place to discuss malware of every flavor, e.g. Storm, Waledac, Conficker and Zeus

"Successful Order" malware spam

Postby Red Dwarf » Tue Apr 26, 2011 7:11 pm

From: " Bobijou Inc" <buxom13@gmail.com>

To: <redacted@sample.com>
cc :
Date: Mon, April 25, 2011, 16:10:00
Subject: Successfull Order 605143

Thank you for ordering from Bobijou Inc.

This message is to inform you that your order has been received and is currently being processed.

Your order reference is 037624.
You will need this in all correspondence.

This receipt is NOT proof of purchase.
We will send a printed invoice by mail to your billing address.

You have chosen to pay by credit card.
Your card will be charged for the amount of 781.00 USD and “Bobijou Inc.” will appear next
to the charge on your statement.

You will receive a separate email confirming your order has been despatched.

Your purchase and delivery information appears below in attached file.

Thanks again for shopping at Bobijou Inc.

> Order_details.zip

That contains malware - "order details.exe" = Trojan horse PSW.Agent.AMCY (AVG detection)
Analysis of the Trojan
Also covered at Paretologic's blog
User avatar
Red Dwarf
You are kiillllling-a my bizinisss!
Posts: 10539
Joined: Tue Jun 27, 2006 2:01 am

Return to Malware

Who is online

Users browsing this forum: No registered users and 1 guest