A blog entry was posted at Sophos a few days ago about an e-card from a friend and one from a bank. Both are emails that contain a link to a malware.

The first one tells the user that he or she has received a Hallmark E-Card. The link shows that it is pointing to a hallmark domain but it actually redirects a user somewhere else. The user will be given an option to download a file called Christmas.exe if he or she clicks on the link.

The second email comes from “Online Banking Team.” It has no hyperlinks but it shows a site link which ends in xmas2.exe.

Source: Sophos