Kaspersky security researchers have identified several cyber campaigns that aim to trick unsuspecting users by sending emails containing seemingly harmless “image files.” In reality, these are fake files used to disguise malware.
One of the spam campaigns identified by experts uses fake emails purporting to come from the T-Mobile phone company and carrying MMS messages. The emails contain an attachment titled “23-10-2013 13_64_09.jpeg.exe”.
Researchers have identified yet another campaign, which relies on fake emails purporting to come from Instagram and transferring the same types of files.
"Your friend added a new photo of you on Instagram. Please open the attachment to see your new photo," the messages state.
In both cases, users may be fooled into assuming that the files are JPEG images. In reality, the files carry malware, such as Trojan.Win32.Neurevt , Backdoor.Win32.Androm , or Trojan – Downloader.Win32.Agent .
