The Troj/Clagger-K Trojan horse has been distributed as an attachment in emails with the following characteristics:

From: Amazon.co.uk < This email address is being protected from spam bots, you need Javascript enabled to view it >
Subject: Your payment done.
Message text:
Dear customer!
We're writing to let you know that we've initiated a transfer from your bank account (Last 4-digits: 0402) for the following amount:
GBP 313.14 (ORDER #0220873 , DATE #20.03.2006)
Funds should leave account in approximately three to five working days.
See your statement details in attachment.
To review your account at any time, please access your Account Summary: https://payments.amazon.co.uk/exec/login?

If you have any questions or concerns regarding this settlement, please contact us at This email address is being protected from spam bots, you need Javascript enabled to view it

Amazon.co.uk Marketplace -- Amazon Services Europe S.a.r.l.

Sell Your Stuff
http://www.amazon.co.uk

"These emails do not really come from Amazon, and clicking on the attached file will install a malicious Trojan horse on your computer," said Graham Cluley, senior technology consultant at Sophos. "Once it has slipped under your radar, this Trojan is capable of downloading further malicious code from the internet, giving hackers access to your PC. A real message from Amazon would never contain an attached executable file, and people should always think carefully before running unsolicited code on their computer."

Sophos customers have been automatically protected against the Trojan horse since 12:32 GMT, 20 March 2006.

Sophos recommends companies protect their email with a consolidated solution to thwart the virus, spyware and spam threats as well as secure their desktop and servers with automatically updated anti-virus protection.

About Sophos
Sophos is a world leader in integrated threat management solutions, developing protection against viruses, spyware, spam and policy abuse for business, education and government. Sophos's reliably-engineered, easy-to-operate products protect more than 35 million users in more than 150 countries. Through 20 years' experience and a global network of threat analysis centers, the company responds rapidly to emerging threats - no matter how complex - and achieves the highest levels of customer satisfaction in the industry.