Evil Email Attachments
Now that phishing spammers are back from their holiday vacation, evil email attachments are on the upswing. They may pretend to be package delivery notices, invoices, tax audits, or other good or bad news. But they end up being bearers of banking trojans or other malware.
If you initial response to an unexpected email message is "What?" or "Oh, No!" then pause before you click on that attachment! It is more likely to be a spamming hacker than what it claims to be.
If you are confident that the message is bogus, you can help other recipients by forwarding the bogus message AS AN ATTACHMENT (ctrl-alt-F in Outlook) to email@example.com to help the spam filter to learn about that particular mischief.
If you are uncertain and want a second opinion before clicking, forward the bogus message to firstname.lastname@example.org for manual evaluation by the IT Security Team. If the hazard is real, we will reply as well as warn others and report and block the mischief in whatever ways are available to us.
Here are some typical messages that we and others have seen lately:
From: HSBC Advising Service [mailto:email@example.com]
Subject: Payment Advice - Advice Ref:[GB657074] / CHAPS credits
Please download document from dropbox, payment advice is issued at the request of our customer. The advice is for your reference only.
Download link: http://darioscarpetcleaning.com/HSBC_DATA/get_document.html
Global Payments and Cash Management
| Hector Heathcliffe used Google drive to share Secured File with you securely as at 14/01/2015 |
DOUBLECLICKHERE |Download files
Attachments: Bank Slip.htm (660 B)
Wednesday, January 14, 2015 7:19 AM
Please we are very sorry for the delays in making the payment, we have
remitted the outstanding payment.
Find attached BANK SLIP of the payment made to your bank account and our
new order on the attach file.
kindly confirm as soon as you receive the payment in your bank account.
KHP Steel Product (M) Sdn.Bhd.
Subject: Payment Overdue
Attachment: Invoice.doc (36KB)
Thank you for choosing our services.
Please see the attached invoice.
Invoice Date: Tue, 13 Jan 2015
Thank you for your assistance in this matter,
Fairbanks Intl Airport