Messages inviting users to see the "real photos" of Osama Bin Laden's remains made the rounds in the email realm today, in addition to the Facebook scams and malware recently spread via Twitter abusing the same topic. Our customers are protected from these types of blended attacks by ACE, our Advanced Classification Engine.
Subjects being used in this attack are "As Fotos do Terrorista Osama Morto" and "As Fotos de Osama Binladem Morto" which of course are designed to tap into the user's curiosity.
The email sample we got hold of today is in Portuguese, like the one below.
The text translates as:
After the pronouncement of the death of Osama Bin Laden several pictures of the body were released on the internet. According to American newspapers not all are real.
The real photos are available on the link below.
Clicking on the provided link prompts the user to download a file called FOTOS.Terroris.zip, which is fairly detected by AV engines.