Credit card fraud spam carries virus

A spam-scam pretends to want your credit card details but a dangerous payload is attached.

A message saying that your credit card has been declined carries more than the usual spam-scam risks for attached is a virus.

The spam-scam is headed something like "ERROR 23741: [VISA OVERDRAFT HAS EXCEED]" and the body of the message (reproduced below) suggests that your credit card details are held by a jewellery company which has been unable to charge your card.

Of course, it's a fraud, but more dangerous perhaps is the fact that a small .exe file is attached to the message, and that file includes malicious code.

The company has posted a warning on its website which carries a note from AVG saying that no virus was found in the message. That is correct: the virus is in the attachment which AVG does correctly identify and quarantine (at least, our copies do).