Better Business Bureau malware attack spammed out | Naked Security

Over 100,000 people are part of the Sophos community on Facebook. Why not join us on Facebook to find out about the latest security threats.

Sorry, something happened and we couldn't sign you up. Please come back later and try again.

Congratulations, you've successfully signed up for our daily news! Check your inbox soon, we've sent you an email.

Sorry, that email doesn't look right to us so we haven't added it to our list.

We're adding your address to our list...

Have you received an email claiming to come from the Better Business Bureau (BBB) today? If you did, be careful.

Because the emails don't really originate from the BBB. Instead, they have been spammed out widely across the internet by cybercriminals hoping that you will be tricked into opening the malicious attachment.

The emails, which have the subject line "Re: Information from BBB", read as follows:

Dear!
Here with the better Business Bureau notifies you that we have received a complaint (ID [random number]) from one of your customers with respect to their dealership with you.

Please open the attached Compliant Report below to obtain more information on this matter and let us know of you point of view as soon as possible.

We are looking forward to your prompt reply.
Regards,
Better Business Bureau

If you received an email like that at your business address you might very well be concerned that you have an unhappy customer and open the attachment (which has a filename of Better_Business_Bureau_Complaint-Report-[random number].zip).

Unfortunately, you'll not be winning an award for good customer service by responding to the complaint - instead you'll be unwittingly infecting your Windows computer with malware.

Sophos detects the malicious code contained within the attached file as Troj/Bredo-RK.

Graham Cluley is senior technology consultant at Sophos. The readers of Computer Weekly voted him security blogger of the year in 2009 and 2010, and he pipped Stephen Fry to the title of "Twitter user of the year" too. Which was nice. He was also named "Best Security Blogger" by the readers of SC Magazine in 2011. You can subscribe to Graham's updates on Facebook, follow him on Twitter and circle him on Google Plus for regular updates.

Source: http://nakedsecurity.sophos.com/2012/02/09/malware-better-business-bureau/

van der sloot heather locklear mlk memorial mlk memorial brown recluse brown recluse joplin tornado