Malware samples received in the avast! Virus Lab Wednesday show that a spoofed email which looks like it has been sent from AVAST is spreading widely. Fortunately, AVAST detects this malware as Win32:Malware[Gen] and has been blocking the virus since 12:45 pm yesterday.
The email’s subject header says, "Your Order details and Additional information," and the email message contains standard text that is sent when a person purchases a license from AVAST. The message includes an order number that is not authenticated and does not exist in the AVAST database.
The sender's email address is noreply@avast.com. This is a fake email address and was not created by AVAST. The email contains an attachment titled avast-Antivirus-Order-Details.zip. The attachment is a file that includes two file extensions - *.PDF.EXE – which is malware.
Our worldwide CommunityIQ sensors automatically detected and provided information to the avast! Virus Lab about these suspicious files, and the new threat was detected and neutralized immediately. So far, our virus lab has received 12,500 malware samples.
Avoid this attack by downloading the new avast! Antivirus 2014 for free.
