Phishing attack targets users with fake BlackBerry ID email

Security vendors say they’ve spotted phishing attacks trying to fool BlackBerry users into opening email on their Windows machines that launches malware for taking over the system.

SLIDESHOW: Is RIM ruined?

RELATED: New BIOS security standards aimed at fighting rootkit attacks

“It’s the typical mass attack,” says Chris Astacio, manager of security research at Websense Security Labs, about what is an authentic-looking replica of a “copy and paste BlackBerry email.”

But this dangerous fake BlackBerry-related email is telling the intended victim that “they have successfully created a BlackBerry ID,” and “To enjoy the full benefits of the BlackBerry ID, please follow the instructions in the attached file.”

The attached file, of course, is loaded up with malware to take over the victim’s computer should he or she open it. Websense says this BlackBerry-related campaign was first noticed Thursday, but 17 out of 36 anti-malware vendors still haven’t provided defense against the Trojan it carries.

Websense is seeing similar code being used in another spam attack that masquerades as email coming from a hotel.

Ellen Messmer is senior editor at Network World, an IDG publication and website, where she covers news and technology trends related to information security. Twitter: @MessmerE. Email: emessmer@nww.com.

Read more about wide area network in Network World’s Wide Area Network section.