A spam mail purporting to be from the Recording Industry Association of America (RIAA) notifies that the recipient's IP has been identified as distributing copyrighted content and instructs to open an attachment to view details.
MalwareSurvical have been notified by their readers about this spoofed email.
Spam Message:
Subject: Notification of copyright violation.
Dear ja111y22@yahoo.com, hereby we notify you that your IP address has been identified as distributing copyrighted content. Please see the attachment to this message for illicit Internet traffic details. Failure to respond to this message within 14 days will result in copyright infringement accusation and standard legal procedures.
Recording Industry Association of America (RIAA)
1330 Connecticut Avenue NW Suite 300
Washington, DC 20036
tel: 202-775-0101
fax: 202-775-7253
Once the recipient download the attachment called report.zip, it will unleash a couple of Trojans.
