Jetstar 'Flight Itinerary' Malware Email

Outline
Email purporting from Australian airline Jetstar, claims that recipients can view a flight itinerary by opening an attached file.



Brief Analysis
The email is not from Jetstar. The attachment contains malware hidden inside a .zip file. If you receive one of these messages, do not open any attachments or click any links that it may contain.

Enter your email address to subscribe to the Hoax-Slayer Newsletter:

Last updated: November 29, 2012
First published: November 29, 2012
Article written by Brett M. Christensen
About Brett Christensen and Hoax-Slayer

Example

Detailed Analysis
Bogus emails falsely claiming to be from Australian airline Jetstar are currently being distributed. The emails claim that recipients can access a flight itinerary by opening an attached file.

However, the attached file contains malware, not a flight itinerary as claimed. Those that fall for the ruse and oped an attached .zip file may then be tricked into installing a malicious program on their computers. Typically, such malware can steal personal information from the compromised computer, contact remote servers controlled by Internet criminals and download further malware components.

Jestar has warned customers about the malware emails via a post on its Facebook page, which notes in part:

Some people are receiving fake Jetstar itinerary emails. These have NOT been issued by Jetstar and we advise you NOT to open any attachment in those emails as they may contain a virus.

In recent months, very similar malware campaigns have targeted several other airlines, including American Airlines and Delta Airlines.

The criminals operating such attacks bank on the fact that at least some recipients will open the attachments out of curiosity or because they believe that their credit card may have been used to fraudulently book flights in their name. And recipients who really have booked flights via the targeted airline may be especially vulnerable.

Be wary of any unsolicited email purporting to offer flight ticket information via an attached file or via a link to a website.




References
Jetstar Warning
American Airlines Flight Ticket Order Malware Emails
Delta Air Lines Passenger Itinerary Receipt Malware Emails

Last updated: November 29, 2012
First published: November 29, 2012
Article written by Brett M. Christensen
About Brett Christensen and Hoax-Slayer