According to the security company, a number of web users have received emails that look as though they might be from big name companies. The emails include an attachment called 'New_Contract.zip', which is actually a dangerous Trojan.
If downloaded and opened, it will infect the user's PC and possibly even steal personal data that could be used in identity theft.
"It is curiosity which the cybercriminals are depending on in order to infect your computer, and potentially steal information, resources and money from you," said Graham Cluley, senior technology consultant at Sophos.
Find your next job with computerworld UK jobs