FYI…

- http://sunbeltblog.blogspot.com/2008/01/ne…-trojan-in.html
January 27, 2008 - "Since late last week, we have been observing a fair number of spams with a Trojan payload, purporting to be a money transfer notification from Western Union… The text may read something like this:
' Dear Mike
Total of #3750 has been transferred by western union
MTCN number is [removed].
Enclosed is the western union sheet
Robert
-or-
Dear Mike
Total of $3750 has been transferred by wetern union
The MTCN number is [removed].
Enclosed is the transfer sheet
I hope this settles my transfer
Robert'
The payload is Trojan.Perfloger… After the Trojan is executed, the user sees a text file… But that, of course, is the least of their problems…"

(Screenshots available at the URL above.)

:ph34r: