Last weekend we detected a wave of spam messages used to distribute malware, emails that are still in circulation.

It’s an attack mainly aimed  at car owners, as the subject of these emails is about some changes in the car tax.

It can reach the computer with any of the following subjects, among others:

***BULK*** Adjustment in the automobile fee.

***BULK*** Adjustment in the car fee.

***BULK*** Switch in the car fee.

Adjustment in the automobile fee.

Adjustment in the automobile tax.

Adjustment in the car fee.

Adjustment in the car tax.

Adjustment in the motor vehicle fee.

Adjustment in the motor vehicle tax.

Changes in the automobile fee.

Changes in the automobile tax.

Changes in the car fee.

Changes in the car tax.

Changes in the motor vehicle fee.

Changes in the motor vehicle tax.

Modification in the automobile fee.

Modification in the automobile tax.

Modification in the car fee.

Modification in the car tax.

Modification in the motor vehicle fee.

Modification in the motor vehicle tax.

Switch in the automobile fee.

Switch in the automobile tax.

Switch in the car fee.

Switch in the car tax.

Switch in the motor vehicle fee.

Switch in the motor vehicle tax.

The email is like the following:

Email_car_documentation_en

In a somewhat “rudimentary” English we are informed that the “ministry of transport” is going to make changes in the car tax and we are advised to read the attached document carefully.

The attached file called CAR_DOCUMENTATION.zip, once decompressed, contains a file that has been detected as Trj/Sinowal.WZZ.  This Trojan family is mainly designed to steal confidential information.

As we always say in these cases, be cautious, don’t trust this type of messages and above all have common sense.