We have just intercepted a number of spammed emails with the subject “Attention! New acts of terrorism in New York, Chicago and Las Vegas” and has the attachment name “Information.zip”. The current email contents and a previous incident (TSPY_FLECSIP.N) are the same except for the alleged new place of terrorism.
The malicious attachment with the MD5 hash of 3CA014361158C167AA1406840DA4CFFF has been given the detection name TROJ_SMALL.BOA.
Below is the actual email:
