Hackers have changed the bait from a Northwest Airlines email to one claiming to come from United Airlines. Spoofing the email address tickets@united.com spoofs the address of tickets@United.com. The email contains the following message, followed by some corporate blurb about United Airlines: Thank you for using our new service “United Airlines ticket Online” on our website. Your account has been created: Your login: Your password: pass8KU9 Your credit card has been charged for $956.27.”]
Source: https://grahamcluley.com/united-airlines-malware-attack/