A spam run of fake Skype voicemail alert emails actually comes packed with malware, a UK police agency warns.
Action Fraud said the zip file attachments come contaminated with a variant of the notorious ZeuS banking Trojan.
Messages typically come with the subject line “You received a new message from Skype voicemail service”. The emails contain a copyright notice and a disingenuous warning that "Skype staff will NEVER ask you for your password via email", all in a bid to appear genuine.
"The purpose of this email is to get you to download the attached 'voicemail' file, and according to email security company MXLab it contains a Zeus Trojan," Action Fraud warns. An alert by the agency contains the tale of the sneaky spam alerts.
ZeuS is a notorious strain of banking Trojan that's a particular favourite with cybercrooks and has been a fixture in scams against UK banks for several years. More details on the scam can be found in a blog post by MxLab here. ®