We’re seeing a widespread malware attack in our spam traps this morning – and what’s making it unusual is that it appears not to be able to decide what it is.

When you first see the subject line, you imagine it’s going to be another “undelivered parcel” attack:

United Parcel Service notification #49674

(the tracking number changes in each email)

And the fact that it uses an @ups.com email address doesn’t do anything to make you think it won’t be another addition to the long line of malware attacks that are spammed out pretending to come from the likes of UPS, FedEx or DHL.

Things get a little weird, however, when you look at the email’s content.

The message, embedded as an image inside the email, claims to come from the Federal Deposit Insurance Corporation (FDIC).

It claims that there are “important changes in current regulations of endowment insurance procedure” that you should look through, and is signed – with “best regards” from the “Federal Deposit Insurance Corporation Investors Relations Department”.

What a strange email!

On one hand it claims to be from UPS about a delivery, and with a split personality it then claims to be a message from FDIC! The attached file appears to keep up the pretence of being FDIC-related – it’s called FDIC_Document.zip.

Beware opening the ZIP file, however. It contains a malicious file called FDIC_Document.exe. Sophos is adding detection of the malware as Troj/Bredo-FA.

This malicious spam campaign is widespread right now, hitting inboxes around the world. Hopefully the cybercriminal’s botched job will stop some people opening the attachment as it’s subject line and ‘from’ address is clearly so out of kilter with its email body.

But no doubt there are some folks who will be so puzzled by this email’s split personality that they’ll investigate the attached file, and end up with an infected Windows computer.

• Malware family “Chepvil” leads rogueware “XP Anti-Virus 2011″.
  One after another malware family trying to panic user to install fake security application. Now the Chepvil malware which comes via email as an attachment. The email as shown below: Email Snip The a...
• RSA Conference 2011 – Live Malware Attack, and Most Educational Security Blog!
  Apologies to our readers from me and from Chester Wisniewski - we haven't written anything for Naked Security for the past week or so. That's because we've been off the air, and on our feet, for the ...
• Outbreak: United Parcel Service notification malware attack spammed out
  Cybercriminals are attempting to infect computers around the world, disguising their attack as an email claiming to come from United Parcel Service about a parcel delivery. But this time they're not u...
• Outbreak: Post Express Service malware attack spammed out
  Sophos -- Be on your guard against the latest "undelivered package" malware attack that cybercriminals are spamming out right now. Regular readers of Naked Security will be all too familiar with em...
• Customized Malware Attacks Become Widespread
  Recent reports noted the spread of malware targeting multiple computing platforms. In a recent incident, Macs appear to have been specifically hit with a new variant of the KOOBFACE worm family. (KOOB...
• Casino spam leads to malware payload
  MX Lab, http://www.mxlab.eu, intercepted a large amount of casino spam in Dutch today that leads to a malware payload on the web site of the online casino King Spin. Message: Top jouw account op door ...
• Customized Malware Attacks Becoming Widespread
  Recent reports have noted the spread of malware targeting multiple computing platforms. In a recent incident, Macs appear to have been specifically hit with a new variant of the Koobface worm family. ...
• LinkedIn Spam Attack Spreads ZeuS Malware (PC Magazine)
  PC Magazine - Don't click social media requests from strangers. You could open up all of your passwords and personal information to theft by the ZeuS malware. View full post on Yahoo! News: Securit...
• LinkedIn Spam Attack Spreads ZeuS Malware
  Don't click social media requests from strangers. You could open up all of your passwords and personal information to theft by the ZeuS malware. View full post on PCMag.com Security Coverag...
• Spammers hit email users with new html attack
  Spammers have suddenly cranked up the use of malicious html file attachments in recent days, according to security company Barracuda Networks. View full post on Network World on Security...