Cybercriminals have begun distributing a spam message containing a malicious Trojan horse, via an e-mail that claims to offer photos of a woman in a bikini.
So be careful, as it's the time when we return to our offices after the holiday break and there is a risk of finding it in our inbox.
In the example below, from SophosLabs, the malicious email claims to be from Selma.
Subject: HAPPY NEW YEAR
Ciao mia cara!
How are you? Come promised, here's my bikini photo. I hope you will love it!
This is my humble gift for the new year! Ci vediamo più tardi 🙂
Il tuo amore Selma
01.01.2013 16:04:43
or
Subject: Merry Christmas
Hello my dear!!!
How are you? As I promised, here's my bikini photos. I hope you will love it!
This is my humble gift for Christmas! See you later 🙂
Your love Ciara
28.12.2012
Despite the fact that the messages are written in different languages (in the examples above, Italian and English) the message is the same – here are the photos of me wearing the bikini I promised you.
The emails contain an attachment called Bikini.zip, which contains a suspicious screensaver – Bikini.scr, which contains a variety of encrypted strings.
Of course, the screensaver (. SCR) is an executable file and can put your computer at risk.
Sophos identified the malware as the Troj/Agent-ZMO Trojan horse.
So be careful with bikinis, especially when they come in the form of executable files and from senders you don't know.

