Fake Amazon.uk emails deliver malware

Customers of online retailer Amazon may have to be on the lookout for emails supposedly coming from Amazon's United Kingdom branch, a security vendor said.

 

Sophos said the spam, resembling legitimate communications from the UK branch of Amazon, trick recipients into opening an attachment containing malware.

 

"In a widespread attack, email messages have been distributed designed to trick computer users into opening an attachment disguised as information about an order for an unnamed item," it said in a blog post.

 

The subject line usually goes "Your Order with Amazon.co.uk" and may appear harmless at first sight, Sophos said.

 

Sophos said the biggest danger is in the attached file, which contains a Trojan horse.

 

"It should go without saying that Amazon UK is a completely innocent party. They didn't send out the emails (despite what the forged 'from' address used in the attack might suggest), and are having their brand tarnished by the cybercriminals behind this attack," it said.

 

Sophos advised computer users to "always keep your security systems up-to-date, and—because of the danger they could introduce to your computer—be suspicious of unsolicited email attachments." — VC, GMA News