What would you do if you received an email that had your name and address in it?

U.K. residents are being flooded with spam emails that have their name and address with information that the sender has more details about them.







The emails are obviously spam as there are numerous grammar and spelling mistakes. However, the scammers are betting that your curiosity will make you click on the attachment to see what information they are talking about.

Once clicked on, it opens a word document that is locked and you have to enter the code that the spammers sent you. That unlocks the document, but it is scrambled and you are instructed to "enable editing". If you agree and click on it, you will be presented with a .gif image.

The .gif actually downloads malware, Troj/Agent-AURH, a strain of bot or zombie malware that calls home to a so-called command-and-control (C&C) network for further instructions.

Your system then becomes a member of a malicious botnet.

Source: Sophos