Fake hi5 invitation carries malware

TrendLabs warns about a malicious spam email campaign that supposedly comes from the popular social networking website and contains a message asking recipients to set up an account and add the sender to their list of friends.

To do so, the recipient must download and open the email attachment named Invitation Card.zip. Unfortunately for the gullible victim, the file does not contain a .htm file – as it may seem at first glance – but an executable that is detected as WORM_PROLACO.AA. Taking a page out of these criminals‘ book, the senders of the hi5 “invitation” tried to make it look like an .htm file by putting a lot of spaces in between the fake and real extension:

As always, users are warned against opening emails and downloading attachments from people unknown to them.