In case you come across an email called “Legal Business Proposal” in your inbox, be careful. It could be part of a malware distribution campaign.
The fake emails purport to come from Webster Bank, and they read something like this:
“Hello, I’m Norman Chan Tak-Lam, S.B.S., J.P, Chief Executive, Hong Kong Monetary Authority (HKMA). I have a Business worth $47.1M USD for you to handle with me. Detailed scheme of business can be seen in the attached file.”
Conrad Longmore of Dynamoo’s Blog has analyzed these emails and has found that the file that’s attached to them is not a business proposal, but an executable that hides a version of the Upatre downloader.
The threat is designed to download additional malware onto infected computers.
If you come across such emails, delete them at once. If you’ve already opened the attachment, regularly scan your computer with an updated antivirus program to make sure it’s not infected.