分析者: Michael Angelo Casayuran

This is a spammed message disguised as a notification from Pay by Phone, a credit-based parking service offered by the Westminster city government. It shows an accurate outline of a parking transaction but leads users to open an attached .ZIP file. This attachment, labeled Pay_by_Phone_Parking-Receipt_717877893, contains a malicious .EXE file detected as TROJ_AGENT.DOCW.

Users are advised not to access the file and delete similar ones immediately to prevent further system damage. Always verify the accuracy of any email message received by contacting the organization directly. Trend Micro protects users from this threat by detecting the spammed message and the malicious file.

 垃圾邮件阻止日期/时间 : 2012年11月8日 23:20:00 GMT-8
 TMASE
  • TMASE引擎(全局:
  • TMASE样式(全局):9350