HOT LINE 1654

Media

Malicious Adobe Invoice.doc file

03 Oct 2014

MX Lab,  started to intercept a new trojan distribution campaign by email with the subject “Adobe Invoice”. This email is send from the spoofed address “Adobe Billing ” and has the following body:

 

Dear Customer,

Thank you for signing up for Adobe Creative Cloud Service.

Attached is your copy of the invoice.
Thank you for your purchase.

Thank you,
The Adobe Team
Adobe Creative Cloud Service

 

The attached file is 42 kB large and has the name Adobe Invoice.doc.

The trojan is known as W97M.Dropper.F, VBA/TrojanDownloader.Agent.AZ, MSOffice/Agent!tr or Win32.Trojan.Macro.Dxmz.