A phishing campaign via the Donbot botnet has been spamming unsuspecting Bank of America customers. Victims receive an e-mail that appears to be from the bank instructing them to confirm their online banking details. After downloading an attachment that claims it ll restore customer s account access, researchers found the phishing trick. In reality the attachment is a RAR file, BillingVerification.exe, that produces an HTML phishing form. After victims input their sensitive information, their data is compromised.
Source: https://threatpost.com/donbot-botnet-exploiting-bank-america-customers-020311/74906/