The Zeus Trojan is back again, looking to spread through zip files. Zeus, which is one of the most commonly found pieces of malware, is believed to be one of the most prevalent on the Internet, infected millions of users.
Researchers with F-Secure have found a new spam set working to disseminate the Zeus malware through infected zip files.
“Just now we’ve been watching a spam run with malicious ZIP files attached to them,” researcher Mikko Hypponen writes. “Inside the ZIP is always the same Zeus variant (md5 92671afe999e12669315e220aa9e62c2) but the name varies.”
The malware appears to also download other components from two sites hosting malware in Russia.