Malware Spam: Uniform Traffic Ticket. Aargh.. A bit old spam but not many AV will detect the malware.

Quoted below is an unsolicited email with malware attached:

Subject:  Uniform Traffic Ticket (ID: 31534)

From:  New York State Department of Motor Vehicles

New York State — Department of Motor Vehicles

UNIFORM TRAFFIC TICKET (ID:77810),


POLICE AGENCY
NEW YORK STATE POLICE
Local Police Code 3

THE PERSON DESCRIBED ABOVE IS CHARGED AS FOLLOWS
Time: 7:25 AM
Date of Offense: 07/02/2011
IN VIOLATION OF NYS V AND T LAW


4 Description of Violation

SPEED OVER 55 ZONE

TO PLEAD, PRINT OUT THE ENCLOSED TICKET AND SEND IT TO TOWN COURT, CHATAM HALL., PO BOX 117

Screenshot of the spam:

5

This type of email is NOT new at all because I’ve seen similar spam last August.  The problem is the following:

  • End-users of popular web-based email services that only depend on free virus email scanner aren’t always protected from downloading unsafe file.  An example is Yahoo! email which is using Norton Antivirus.  It failed to detect the malware attachment: 

1

2  3  4

Hopefully, people won’t fall into executing the Uniform traffic ticket.zip or extract and execute the uniform traffic ticket.exe file.

6

Or else, they will have to remove Win32/Gamarue.B, a computer worm that can also spread through removable drives e.g. AutoRun virus, communicate to attackers server and download some files to the affected computer.

As you know already, Microsoft found out that their Malicious Software Removal Tool have detected 26.0% malware propagated through USB Autorun, 17.2% of malware have propagated through Network Autorun and 44.8% through user interaction.  More information of malware propagation in Volume 11 of Microsoft Security Intelligence report, released this month. 

The above email is one of the methods that a computer worm infects a computer and then spread to your network (home or office network).

Be very careful when receiving such email especially if you are in New York.  People who don’t live in New York or U.S.A have more reasons to delete this type of email.

Leave a Reply