NEWS FROM THE LAB - Sunday, January 14, 2007

Do you have a TV permit? Posted by Mikko @ 12:58 GMT

There's a fairly large malware spam run going on in Germany.

The e-mails claim to be from GEZ, the local TV permit authority. The mail contains a bill for 445,99e for unpaid TV watching licenses.

The attachment, of course, is an executable: RechnungGEZ.pdf.exe. We now detect this as


When run, the attachment shows a fake error message to explain why you don't see the real bill after opening the attachment: