A Bad Apple in a Bowl in the Window

One for German readers.

Sorin Mustaca warns of a spam campaign with emails appearing to come from Apple or Plus.de, claiming that the recipient owes money for a recent purchase. This ‘Dritte Mahnung’ is presented as if it’s the third and final reminder before the company hands over the documentation relating to the ‘non-payment’ to the lawyers: however, it’s actually a malicious Windows executable (not a Mac binary) detected as TR/Rogue.957311 and TR/Kazy.169263.1.

Specifically, it’s a ZIP archive containing a .SCR. Which denotes a screensaver, but is actually to all intents and purposes an .EXE, whether or not it’s a genuine screensaver. Gosh, this takes me back to the good old days of massmailers…

So if you get something like this (irrespective of the language), don’t let it panic you into thinking that your 7-year-old has just ordered an iPad Mini…

David Harley