UPS and Bredolab Trojan

I thought I got an official email from UPS. Turns out it was a trojan (malware, spyware, virus).

The email stated that it was from the Parcel/Delivery group of UPS.com, and the subject line even showed: "UPS Delivery Problem NR 63649"

Here's what was in the body of the email:

Hello!

We were not able to deliver your postal package you have sent on the 28th of December in time
because the addressee's address is not correct.

Please print out the invoice copy attached and collect the package at our office.

United Parcel Service of America.

And that's where the attempt to infect my PC begain... in the attached file (called UPS_invoice_NR5872.exe)

First of all, why does an invoice have to be an executable file? Weird.

Anyway, it's a good thing the Avast! Antivirus program showed a warning, which gave me the chance to delete the Bredolab trojan file before it could do anything.

Yes, I still use POP email, because I don't want to get rid of a certain old email address. Call me sentimental. ;-)

Let's all be careful out there, and practice safe computing.

[ First posted on 01/30/2010 by Manuel Viloria ]