13 Jan 2009 | By Kristopher | Posted under Backdoors, Trojans | 3 Comments »

NorthwestAirlines.zip is a Trojan attached to a scam email that pretends to be a ticket from Northwest Airlines.

This NorthwestAirlines.zip email reads:

From: Damian Muller
Subject: E-ticket #4418910180

Hello!
Thank you for using our new service “Buy Northwest Airlines ticket Online” on our website.
Your account has been created:
Your login: ida.camacho@t********.com
Your password: passXNK0
Your credit card has been charged for $471.52.
We would like to remind you that whenever you order tickets on our website you get a discount of 10%!
Attached to this message is the purchase Invoice and the Northwest Airlines ticket.
To use your ticket, simply print it on a color printed, and you are set to take off for the journey!
Kind regards,
Damian Muller
Northwest Airlines
Attachment: NorthwestAirlines.zip

If you open this NorthwestAirlines.zip attachment, you’ll probably launch a Trojan that’ll give a hacker control over your computer.

I’m sure identity theft sounds like a fun weekend, but if you’d rather spend your weekend otherwise — church? Family? Strip club? — I can show you how to get rid of NorthwestAirlines.zip for free.

Keep reading »