Spoofed MasterCard warning delivers malware

A worrisome email notifying users that their MasterCard debit card has been blocked just when most of them are trying to do their holiday shopping has been landing in inboxes around the world, warns MXLab.

“We’ve detected unusual activity on your Bank debit card,” claims the email. “Your UK Bank debit card has been temporarily blocked, please fill document in attachment and contact us.”

Unfortunately for those who fall for the admittedly well-crafted email, the attached MasterCard_D77559FFA7.zip file contains a variant of the Fareit Trojan that aims to steal private information and passwords from local Internet browsers, as well as to harvest credentials from local FTP client software.

The malware is currently detected by less than half of the AV solutions employed by VirusTotal.