Fake booking reservation confirmation emails from contain a trojan « mxlab – all about anti virus and anti spam

MX Lab,, started to intercept a new trojan distribution campaign by email with the subjects similar like “Reservation Confirmation [6294011], Tue, 31 Jul 2012 18:19:42 +0900″.
The email is send from the spoofed address “ ” and has the following body:

Date: Tue, 31 Jul 2012 18:19:42 +0900 ―
Herewith you receive the electronic reservation for your hotel. Please refer to attached file for full details.
Arrival: Saturday, August 04, 2012
Departure: Monday, August 06, 2012
Number of rooms: 1
Customer Service Team
Your Reference ID is: 8751747
The reservation service is free of charge. We do not charge you any booking fees or administration fees, and in many cases rooms offer free cancellation.

  • guarantees the best hotel rates in both cities and regional destinations – ranging from small family hotels to luxury hotels.