The Comodo team identified the multi-language phishing campaign through IP, domain and URL analysis. While close analysis of the emails revealed some irregularities in grammar and syntax, most recipients do not assume all incoming emails are phishing attempts and thus may not be reading them as closely as they could be, Comodo said. In addition, the firm noted cybercriminals are getting better at mimicking the colors, logos and feel of official websites.

"Through our specific IP and URL analysis – as well as the Comodo Threat Research Labs' continuous monitoring and scanning of data from Comodo's users – our team was able to identify this specific, high-volume malware attack, and we simply want to alert the public to it," Fatih Orhan, director of Technology for Comodo and the Comodo Threat Research Labs said. "As a company, we work diligently to create innovative technology solutions that stay a step ahead of cybercriminals and keep enterprises and IT environments safe."

Since a malware campaign such as this one can return in other forms and target a new group of people, Comodo offered the following advice for potential victims of phishing schemes:

• Check the email address and domain name of the company that sent the email. While it may appear to be an official email, closer inspection often reveals no connection with the company named.
• Check with the company IT department before opening or clicking on a link that is deemed suspicious.

Comodo also recommended systems administrators and IT directors looking to prevent malware from spreading across their network and endpoints put a reliable endpoint security protection platform in place. Companies should also conduct regular penetration testing, use antivirus, firewall and containment technologies as part of a layered defense system, and regularly train employees to raise awareness for phishing and other social engineering attacks.