A new spam campaign claiming to come from Amazon.com states that a smartphone is being shipped to the recipient, in an attempt to spread malware.

"Users who may be tempted to click on the links contained in the message are taken to a website that serves a piece of malware which relies on unpatched Windows vulnerabilities to drop its payload," writes Softpedia's Eduard Kovacs.

"The malware in question is a variant of Cridex, especially designed to steal personal and financial information from the computer it lands on, reports Hoax Slayer," Kovacs writes.

Go to "Your Smartphone from Amazon Has Shipped, Malware-Spreading Spam" to read the details.

For regular security news updates, follow eSecurityPlanet on Twitter: @eSecurityP.