Malicious “Balance Checker Tool”

TrendLabs warns about spam messages with the subject “Your credit balance is over its limits” professing to be from Vodafone and Verizon Wireless. The email states that the user’s credit balance is over the limit, and directs him/her to use the Balance Checker Tool can be found in the attachment to review their payment.

Unfortunately, the .zip file in question contains malware (detected by Trend Micro as TSPY_ZBOT.SMP) that steals usernames and passwords for online banking accounts and disables the Windows Firewall.

Users are warned not to fall for it and if they are not sure about similar emails, to contact the company in question to verify the legitimacy of the message before opening an attachment of this sort.