Spoofed Delta Airlines Contains Malware

[Peaches]

Mar27

Spoofed Delta Airlines Contains Malware

by Jake Soriano (Technical Communications)

The Trend Micro Content Security team discovered spoofed email messages that pretend to be from Delta Airlines. The fake email message contains a confirmation numbers of supposed ticket purchase and a ZIP file. Recipients are told that this said file contains details on the travel itinerary.

Here’s a screenshot of a spammed message: http://blog.trendmicro.com/spoofed-delta-a...ntains-malware/

The ZIP file is, of course, a malicious file detected by Trend Micro as TROJ_DELF.PSZ.

The Trojan automatically runs at every system startup by modifying a registry entry. It has rootkit routines which enable the binary to hide its processes, files, or registry entries. The file also connects to a website to download files. This exposes an infected system to more threats.

TreendLabs - http://blog.trendmicro.com/spoofed-delta-a...ntains-malware/