New Wave of Zbot-Infected Emails

Security researchers warn of a new wave of spam emails with different subjects and content distributing a variant of the Zbot trojan in attachments.

Judging from the subjects of the rogue emails, like "Another candidate brought to you", "EBOD Meeting MEC Update", "Fw: New Taxes Coming", "Summary of payments" or "Sales Dept" the attack targets business users.

The interesting aspect of this campaign is that there are several emails with different subject and content that carry the same payload – a new Zbot variant with a very low detection rate.

One of the messages, which sounds credible enough, even misuses IBM's name in order to trick recipients into opening the malicious attachment and executing the malware.