Spam emails, purporting to deliver a money-transfer notification from Western Union but containing an attachment with an executable trojan, have been spotted in the wild by researchers at Sunbelt Software.