May 30, 2007  A phishing scam is currently in circulation which targets the Better Business Bureau (BBB).  The message claims that a complaint has been filed against the recipient's company. Attached to the message is a Microsoft Word document (Document_for_Case.doc), supposedly containing additional details regarding the complaint. The Word document actually contains a Trojan Downloader that, when opened, attempts to download and install a keylogger. This keylogger uploads stolen data to an IP address in Malaysia. EXAMPLE:

From: Better Business Bureaus [mailto:operations@bbb.org]
Sent: Wednesday, May 23, 2007 7:39 PM
Subject: Complaint Case Number XXXXXXXXXX

Dear Mr./Mrs. XXXXXX

You have received a complaint in regards to your business services. The complaint was filled by Mr. Mark Williams on 5/21/2007

Complaint Case Number: XXXXXXXXXX
Complaint Made by Consumer Mr. Mark Williams
Complaint Registered Against: XXXXXXXXXX
Date: 5/21/2007
Instructions on how to resolve this complaint as well as a copy of the original complaint are attached to this email.

Disputes involving consumer products and/or services may be arbitrated. Unless they directly relate to the contract that is the basis of this dispute, the following claims will be considered for arbitration only if all parties agree in writing that the arbitrator may consider them:
- Claims based on product liability;
- Claims for personal injuries;
- Claims that have been resolved by a previous court action, arbitration, or written agreement between the parties.
The decision as to whether your dispute or any part of it can be arbitrated rests solely with the BBB.

The BBB offers its members a binding arbitration service for disputes involving marketplace transactions. Arbitration is a convenient, civilized way to settle disputes quickly and fairly, without the costs associated with other legal options.


© 2003 Council of Better Business Bureaus, Inc. All Rights Reserved.

The attachment of this e-mail will be blocked on your BSU account by Symantec antivirus if you have your antivirus software up-to-date.  The attachment may appear as DELETED0.txt