Fake emails – American Airlines

I have come across some significant activity related to spam email messages that are pretending to be from American Airlines. This email misguides the user that his purchased ticket scan copy is attached with this email and asks him to print it for use.

The email has “Ticket.zip” as an attachment contains a malicious ‘Ticket.exe’ file. When executed it infects the system with a malicious code. In this case the attached sample installs the Rogueware named XP Home Security 2012.

Quick Heal detects and deletes the attached file and installed rogue security software.

Ranjeet Menon