MX Lab intercepts a new trojan W32/Bredolab!Generic variant attached in emails from Western Union with the instructions on how to receive the money transfer.

Possible subjects:

Western Union transfer is available for withdrawl.
Western Union. You should receive money transfer! Order 7909.

Senders:

< This e-mail address is being protected from spambots. You need JavaScript enabled to view it >
< This e-mail address is being protected from spambots. You need JavaScript enabled to view it >

Content of the email:

Hello.

The amount of money transfer: 5887 USD.
Money is available to withdrawl.

You may find the Money Control Number and receiver’s details in document attached to this email.

Western Union.
Customer Service Center.

We did noticed that with this campaign, since November 5th 2009, the attached ZIP archive is only 4 kB big and when extracted the executable is 0 kB big! It seems there is some issue with the email distribution but we expect that this can change quickly.

Virus Total link and MD5: e6069e83c06da868637489466daed9d3.