We've received some reports of a new password stealer being spammed around the world. This one doesn't spread further, so it's not a virus. Once the user opens the attachment, a password stealer and a backdoor is installed to the system.
The emails look like this:
From: [random email address] Subject: Important news about our soldiers in IRAQ!!! To: [random email address]
Seven officers was lost today, follow the link to get the full story.
http://www.iraqbodycount.net/bodycount.htm
Attachment: IMPORTANT INFORMATION.ZIP
The mail links to website iraqbodycount.net, which has nothing to do with the whole case.