Malware authors are sending out booby-trapped emails disguised as electronic ticket receipts.

Trojan horse malware buried in messages ostensibly from United Airlines circulating this week follow a similar attack featuring emails purporting to come from Northwest Airlines last week. In both cases the messages come form spoofed email addresses and feature zip attachments, typically called Your_ETicket.zip, loaded with Trojan horse malware, such as the Agent-IPS Trojan.

Net security firm Sophos has screenshots of the malicious email in write-ups of the UA attack (here) and Northwest Airlines assault (here).

The tactic itself first made an appearance last year. Sophos has made a video of an assault in action which can be viewed here. ®

Related stories

• Symbian Trojan strikes Indonesian operator (22 January 2009)
• Three in 10 Windows PCs still vulnerable to Conficker exploit (19 January 2009)
• Virus writer signs off in cordial Trojan message to MS (13 January 2009)
• Trio indicted over Trojan brokerage scam (8 December 2008)
• Booby-trapped emails fly back into fashion (4 December 2008)
• United 'bankruptcy' points to new stock scam techniques (10 September 2008)
• Flight disaster phishing scam lands in Brazil (3 October 2006)
• UK shelters from smut Trojan blitz (19 December 2005)