Friday, October 30, 2009 3:33 PM
cmosby
Trojan.Bredolab is Making Yet Another Comeback – Symantec Security Blogs
This time the email is masquerading as a notification from Facebook that the recipient’s password has been reset.
The message comes with a .zip file containing a malicious .exe file. Symantec detects the .exe files as Trojan.Bredolab.
This variant of Bredolab connects to a Russian domain and the infected machine is most likely becoming part of a Bredolab botnet.