Spoof e-mail, “Your BlackBerry ID has been created”, contains malware
Signed from ‘The BlackBerry Team‘, users should watch out for an e-mail with the subject, “Your BlackBerry ID has been created”, containing harmful malware.
Legitimate e-mail content
According to Websense, the wording of the e-mail, is actually a copy and paste effort of an official e-mail that BlackBerry sends to new users that have created a BlackBerry ID. As such, the wording and spelling is correct, which could trick users more easily than normal phishing e-mails.
The content of the e-mail message reads:
You’ve created a BlackBerry ID!
To enjoy the full benefits of your BlackBerry ID, please follow the instructions in the attached file. BlackBerry ID is your universal BlackBerry key. Here is what it offers:
– One sign in for all BlackBerry applications, services and websites.
– Automatic transfer of some email accounts and services when you switch smartphones.
– Full access to all features in BlackBerry App World storefront.
– Protection of financial transactions using BlackBerry services.
You can learn more about BlackBerry ID by visiting blackberry.com
The BlackBerry Team
Malware contained in attachment
The e-mail contains an attachment, BlackBerry_ID9890843_Instruction.zip, which is identified by Kaspersky as Backdoor.Win32.Androm.gi. This trojan is also the same malware being distributed as part of the Booking.com phishing e-mails, as reported by Softpedia.