MX Lab, http://www.mxlab.eu, started to intercept a new trojan distribution campaign by email with the subject “Facture N: 01-249576284 !”, note that the invoice number changes with each email.

The email is send from the spoofed address “FreeBox -Internet <service@freebox.fr>” and has the following body:

Chers Client (e)

Par mesures de sйcuritй et Grвce а notre expйrience, Nous contrфlons tous les charge inhabituelles liйe a votre compte.
Nous avons le regret de vous informer que votre compte freebox sera limitй , a cause d’un mouvement inhabituel sur votre compte

Numйro de Rйfйrence : BF738492

Pour supprimer cette limitation veuillez mettre а jour de votre information personnel concernant votre compte freebox :

* Cliquez sur le lien suivant : Metter а Jour De Votre Information Personnel .
* Connectez-vous
* Mise а jour vos informations personnelles
* Reconnectez-vous

Vous avez un dйlai de 48h pour rйtablir l’accиs а votre compte sans ceux votre compte sera supprimй dйfinitivement !

Veuillez croire, Madames et Monsieurs, а l’expression de nos sentiments les plus respectueux.

Service Freebox !

The phishing URL is behind the text “Metter а Jour De Votre Information Personnel” and points in this case to hxxp://dedecome.com/. When we visited the site for investigation, the web page in question was not available. But rest asure, this is a phishing attempt.

• HM Revenue & Customs phishing emails – continued
  MX Lab, http://www.mxlab.eu, is intercepting tax refund phishing emails with the subject “Please Submit Your Payment Refund″ and an attached HTML webpage. We have reported this earlier on on January 2...
• A wave of PayPal phishing emails
  Over 200 million people have accounts on PayPal, making it a key target for internet fraudsters attempting to steal money. One of the way that criminals try to get their hands on your cash is by phish...
• HM Revenue & Customs phishing emails
  MX Lab, http://www.mxlab.eu, is intercepting tax refund phishing emails with the subject “FORM SAT-19287″ and an attached HTML webpage. The emails is send from the spoofed email address x...
• Emails with the URL anoniemberichtje.com is a phishing attempt and you will get a expensive SMS subscription
  MX Lab intercepted some emails with the subject “Lees ffkes mn bericht” – can be translated to “read my message”. This message is written in the Dutch language – so...
• Adobe Flash malware in what appears as phishing emails
  MX Lab intercepted some emails that appear to be genuine phishing emails but when investigating the included URLs further, they are in fact an attempt to install malware on a computer in the form of a...
• 3.7 billion phishing emails were sent in the last 12 months
  Cybercriminals sent 3.7 billion phishing emails over the last year, in a bid to steal money from unsuspecting web users, says CPP. View full post on Network World on Security...
• Cyber Crooks All Set to Crash the British Royal Wedding
  As we have seen with many major events in the past, news of the British Royal Wedding is currently being used by cyber criminals to bolster their spam campaigns and push rogue antivirus software throu...
• New spamvertized campaign theme
  The wave of  United Parcel Service, DHL Global and Post Express Office spam - which has been so prolific and leading to scareware infections - changed to Bobijou Inc. over the Easter weekend.Howe...
• More fake Twitter emails
  It’s been over a month since we wrote about fake Twitter email messages, and if it worked once for scammers, they’ll certainly try it again. Commtouch labs is seeing large quantities of &#...
• The Rise of the Targattacks*: Cyber espionage and sabotage: the new way – *Abbr.: targeted attacks
  During the last 18 months we saw a growing number of targeted attacks against numerous companies and organizations. Let's briefly have a look at some of them: The Aurora Attack: an attack that began ...