Foto unzips to reveal nasty surprise

A new email threat surfaced on August 31st, after several variants were spammed to recipients. The email carries a malicious attachment - either foto.zip or fotos.zip. The html file inside the zip may look harmless, but it delivers a one-two punch in the form of a downloader Trojan.
Bagle.AI description