Sophos researchers are warning of e-mails claiming to come from a company's IT department, which appear to link to an internal company file called antivirus.exe.
"The email contains a warning of an infection of the users' computer and asks them to download an antivirus to clean it up," writes Help Net Security's Zeljka Zorz.
"The offered 'antivirus' is actually a Trojan," Zorz writes. "Hopefully, the poor spelling and sentence construction will alert many to the real nature of the email, but there are always those who might panic and immediately proceed to do as instructed."
Go to "Fake virus warning from company IT department brings real malware" to read the details.
For regular security news updates, follow eSecurityPlanet on Twitter: @eSecurityP.