Unsolicited fake CVs distributing malware

The global recession has brought a shortage of jobs, but job seekers are not the only ones who are targeted by malicious emails and scams.

TrendLabs has recently spotted an email spam campaign that contains just one line of text:

The Resume_document_589.zip file attached to the message is supposed to be the CV in question, but is actually a zipped-up malicious .exe file that drops a Trojan downloader into the victim’s system.

Most users and especially HR managers wouldn’t be fooled into opening the attachment, but for those who are not familiar with this type of spam, the curiosity might prove too much.

It is good to remember that unsolicited emails should be carefully analyzed – if you’re not expecting such an email, and you don’t recognize the sender’s name or email address, it is best to pass up on opening attachments or following embedded links.