Since yesterday, our lab has detected a flood of email messages that seem to contain a postcard, but it’s actually malware. We’ve seen around 5,000 in a few hours.
It’s not the first time we see emails like this in circulation, as subjects like “You’ve received a postcard†are very recurrent.
The message is like the following:

It makes reference to a legal website to download and send postcards, so that users don’t suspect. In order to view the postcard, you have to open the attached file. It’s a file compressed with zip and if you run it, the Trojan detected as Bredolab.X will be downloaded to your computer. At the same time, this will download the rogue antivirus known as SecurityTool.
Pay attention to the emails you receive in your inbox and if any of them is like this, ignore it.
Perhaps this is the beginning of a new wave of emails to get us ready for Saint Valentine’s Day, a very beloved date for cyber-crooks.
