Request to Review CV May Be a Malware Attack, Sophos Informs

Article by George Norman (Cybersecurity Editor)

on 11 May 2010

In these harsh economic times, many people find themselves out of a job. So what do they do? They start sending out CVs (or resumes) to potential employers. Human resources departments may find themselves faced with a flood of messages from people looking for a job. Perhaps not a flood, but they will definitely get unsolicited emails from people looking for a job.

Not all messages are legit though. Some may be from malware spreaders announced Sophos, company that specializes in providing antivirus, anti-spam, spyware removal software, network and internet security, data protection, and computer security solutions.

Senior Technology Consultant with Sophos, Graham Cluley, announced there is a new spam campaign making the rounds online. The spam message looks like this:

Subject: New resume
Attached file: Resume_document_459.zip
Message body: Please review my CV, Thank you!


The attached file is definitely not a CV or resume – it is in fact malware. If you receive such a spam message, you should delete it immediately. Whatever you do, do not download the attached zip file. If you do download the attachment, your computer may get infected with malware. Sophos detects the malware as Troj/Invo-Zip and Mal/EncPk-NS.

“Don't make life easy for the cybercriminals. Always remember to be suspicious whenever you receive an unsolicited email out of the blue. After all, you could be making your very own career-limiting move if you help a hacker's malware break into your company,” commented Graham Cluley.

In related Sophos and related spam news, the company has announced that spammers are using promises of $50 iTunes gift certificates to spread malware. The user receives a spam message that seems to originate from iTunes; the message claims that if the user downloads the archive attached to the message, he will get a $50 iTunes gift certificate. The attachment is nothing more than malware. Read more on this topic here.

UPDATE: The fake CV spam campaign has been tweaked (see here).


Latest News


Sony's 'Attack of the Blockbusters Sale' Slashes Prices in Half for a Ton of PS4 Games

17 Aug 2017

How Samsung's New T5 Compares to the Old T3 Portable SSD (Infographic)

17 Aug 2017

See all