Debunking hoaxes and exposing scams since 2003!







Malware Threat Articles



This page contains an archive of malware reports.

Go here for the latest malware reports from Hoax-Slayer.




  • Target 'Order Confirmation' Malware Email
    Order confirmation email purporting to be from Target claims that the company's online store has an order addressed to you. The message advises you to click a link to obtain full order information.
    Published: December 19, 2014

  • Payment Gateway 'Credit Card Transaction Result' Malware Email
    Payment gateway transaction result notification email claims that your credit card has been charged several hundred dollars. The email includes an attachment that supposedly contains a sales receipt for the transaction.
    Published: December 15, 2014

  • Fake Facebook Password Reset Email Links to Malware
    Email purporting to be from Facebook claims that your password has been reset due to suspicious activity and you must click a link to 'restore the password'.
    Published: December 10, 2014

  • Fake Walgreens Order Email Opens Malware Website
    Order Email purporting to be from US pharmacy retailing chain Walgreens claims that you can find more information about a recent order by clicking a link.
    Published: December 10, 2014

  • Malware Email Claims 'You Have Received a New Fax'
    According to this email, you have received a new fax. The email implies that printing company Epson sent the fax. Supposedly, you can view the fax by opening an attached .pdf.
    Published: December 3, 2014

  • Fake Walmart 'Order Details' Email Opens Malware Website
    Email purporting to be from Walmart claims that you can click a link to read more information about a recent order.
    Published: December 2, 2014

  • Fake Costco Order Notification Leads to Malware
    Email purporting to be from Costco thanks you for your recent order and invites you to view order details by clicking a link.
    Published: November 28, 2014

  • E-Cigarettes Used to Distribute Malware? Plausible, But Not Yet Confirmed
    Several circulating reports are warning that E-Cigarettes may be used to distribute malware to unsuspecting customers.
    Published: November 24, 2014

  • 'Naked Woman Eaten by Shark' Post Leads to Malware
    This Facebook post features an image of a naked woman apparently being eaten by a shark and includes a "Play" button that supposedly opens a video showing the attack.
    Published: November 17, 2014

  • Australia Post 'Parcel not Delivered' Email Points to Malware
    Email purporting to be from Australia Post claims that your parcel was not delivered to your address because nobody was home. The email instructs you to click a 'Track Your Item' link to get more information about the undelivered parcel.
    Published: October 23, 2014

  • MALWARE: ‘Important - New Outlook Settings’ Email
    Email with the subject line 'Important - New Outlook Settings' advises you to click a link to download instructions before updating settings for Microsoft Outlook.
    Published: October 17, 2014

  • FNBO Account Application Malware Email
    Email purporting to be from First National Bank of Omaha (FNBO) claims that your account application ahs been received and invites you to open an attached file to view documents about your application.
    Published: October 13, 2014

  • MALWARE - Emma Watson 'Private Video' Facebook Message
    A message being posted on Facebook invites users to click a link to view a salacious leaked video depicting Harry Potter actress Emma Watson.
    Published: October 12, 2014

  • Viper 'Missed Call' Malware Email
    Notification email purporting to be from messaging service Viper claims that you have a missed call waiting and invites you to click a link to listen to the message.
    Published: September 30, 2014

  • MALWARE - 'My New Photo' Emails
    Emails with the subject line and text 'my new photo :)' include an attached .zip file that supposedly contains the promised image.
    Published: September 22, 2014

  • MALWARE - 'Invoice Overdue Notification'
    'Invoice overdue' email claims that, if you do not pay the outstanding amount within 7 days, legal action will be taken to recover the money owed. You are invited to 'press a link' to view the original invoice.
    Published: September 17, 2014

  • MALWARE - TNT Express 'Could Not Make Delivery' EmailE
    Message purporting to be from delivery company TNT Express claims that the service could not make delivery of a parcel and you should therefore click a link to get a postal receipt.
    Published: September 10, 2014

  • BH Live 'Peter Pan' eTickets Malware Email
    Ticket order confirmation email purporting to be from UK ticket agency BH Live Tickets claims that you can view and print your purchased tickets to Peter Pan by opening an attached file.
    Published: September 8, 2014

  • Shakira Death Hoax Email Contains Malware
    Spanish language email claims that Colombian entertainer Shakira has been killed in a car accident and invites you to open an attached file for further details.
    Published: September 8, 2014

  • MALWARE - Order Number 'Thank You For Using Our Services' Email
    Email claims to be a notification about recent transaction and includes an order number, price, and payment method. It advises you to open an attached file for details about the purchase.
    Published: August 27, 2014

  • MALWARE - 'K&L Gates Debt Recovery Notification'
    Debt recovery notification email purporting to be from K&L Gates claims that you have unpaid utility bills and must pay within three days or face court and possible eviction.
    Published: August 27, 2014

  • Fake Adobe Invoice Email Contains Malicious Macro
    Email purporting to be from the Adobe Billing Department claims that you can view an invoice for Adobe services by opening an attached Microsoft Word document.
    Published: August 26, 2014

  • MALWARE - 'Baker & McKenzie' Court Notice Email
    Email purporting to be from law firm Baker & McKenzie claims that you are scheduled to appear in court and should click a link to view a copy of the court notice.
    Published: August 20, 2014

  • Macro Virus Threat Returns - Beware Emails With Malicious Word Attachments
    Unsolicited emails with attached 'invoice' or 'payment' Microsoft Word documents ask users to enable Macros to view document contents.
    Published: July 24, 2014

  • Amazon 'Order Details' Malware Email
    Email purporting to be from Amazon, thanks recipients for their order and invites them to view order details in an attached file.
    Published: July 24, 2014

  • MALWARE - 'British Airways - Your Flight Ticket Not Activated'
    Email purporting to be from British Airways claims that your flight ticket has not been activated and asks you to open an attached file and fill in a form to complete the ticket activation.
    Published: June 2, 2014

  • MALWARE - 'Justice.gov.uk Parking Fine Reminder Notice'
    'Reminder notice' email purporting to be from the UK's Ministry of Justice claims that the recipient owes money for a parking fine and should open an attached document for more information.
    Published: May 19, 2014

  • MALWARE - Paymer 'Thank You for Your Deposit' Email
    Message purporting to be from digital payment service Paymer thanks recipients for their deposit and claims that they can view the payment ticket in an attached file.
    Published: May 5, 2014

  • RingCentral 'New Fax Message' Malware Email
    Email purporting to be from Internet fax service RingCentral claims that the recipient has a new fax message that can be viewed by opening an attached file.
    Published: April 9, 2014

  • MALWARE - 'Confidential - ALL Employees Important Document'
    Email purporting to be a confidential message from the recipient's employer claims that all employees must fill out and submit an important document contained in an attached file.
    Published: April 2, 2014

  • MALWARE - 'Traffic Accident With Your Car' Email
    Email claims that the recipient 'hurt' the sender's car in a traffic accident and urges him or her to view photos of the accident by opening an attached file.
    Published: March 31, 2014

  • 'Homicide Suspect' Malware Email - Fake Critical Reach Alert
    Message purporting to be from community alert system Critical Reach claims that recipients can read a bulletin about a homicide suspect by opening an attached file.
    Published: March 27, 2014

  • MALWARE - 'Suspicion of Cancer' Blood Test Results Email
    Email purporting to be from the UK's National Institute for Health and Care Excellence (NICE) claims that an analysis of the recipient's blood has revealed a low level of white blood cells that could indicate cancer. The message urges the recipient to print out test results contained in an attached file to give to his or her doctor.
    Published: March 14, 2014

  • 'Energy Statement' Malware Email
    Message purporting to be from the "Energy Billing System" claims that the receiver's latest energy bill is now available online and can be viewed by clicking a link.
    Published: February 15, 2014

  • 'Incoming Fax Report' Malware Email
    Email purporting to be a notification about an incoming payroll related fax claims that users can click a link to read the file online.
    Published: February 12, 2014

  • 'Image Has Been Sent by Evernote' Malware Email
    Email purporting to be from note taking application Evernote claims that an image has been sent and invites users to click a link to view the image.
    Published: February 3, 2014

  • 'My Home is Burning' Facebook Phishing and Malware Scam
    Private Facebook message purporting to be from a friend of the recipient claims that the sender's house is burning to the ground. The recipient is invited to click a link to see footage of the fire.
    Published: December 31, 2013

  • Wedding Invitation Malware Emails
    Email supposedly inviting recipients to an upcoming wedding instructs them to click a link to read the full invitation text.
    Published: November 15, 2013

  • Payment Slip Confirmation Malware Email
    Email asks recipients to confirm a supposed payment by reviewing a payment slip contained in an attached file.
    Published: October 10, 2013

  • IRS 'Invalid File Alert' Malware Email
    Email purporting to be from the IRS claims that errors have been found in files electronically submitted by the recipient.
    Published: October 1, 2013

  • Fake Companies House Emails Contain Malware
    Emails purporting to be from the UK government's Companies House claim that a company complaint has been submitted against the recipient. The emails claim that more information can be viewed by opening an attached file.
    Published: September 11, 2013

  • Land Registry Debit Notification Malware Emails
    Emails purporting to be from the UK's Land Registry claim that fees will be debited from the recipient's account in the coming days. The messages claim that users can access details about the fees to be debited by opening an attached file.
    Published: September 10, 2013

  • ATO Tax Refund Malware Emails
    Email purporting to be from the Australian Taxation Office (ATO) claims that the recipient is eligible for a tax refund and should open an attached .zip file containing a Microsoft Word document for further details.
    Published: August 8, 201

  • Bank of America 'Transaction is Completed' Malware Emails
    Emails purporting to be from Bank of America claim that a transaction has been completed and that a large sum of money has been successfully transferred. The message claims that a payment receipt is included in an attached file.
    Published: August 1, 2013

  • Qantas 'E-Ticket Itinerary Receipt' Malware Email
    Email purporting to be from Australian based airline Qantas claims that recipients can view an 'E-Ticket Itinerary Receipt' by opening an attached file.
    Published: July 25, 2013

  • Bank of America Merchant Statement Malware Email
    Message purporting to be from Bank of America claims that recipients can view a Paymentech electronic Merchant Billing Statement by opening an attached file.
    Published: July 23, 2013

  • Expedia Travel Itinerary Malware Email
    Email purporting to be a trip itinerary from travel booking service Expedia.com.au provides details for a recently booked trip and claims that recipients can view trip details in an attached file.
    Published: July 9, 2013

  • UPS 'Parcel Has Been Found' Malware Email
    Email purporting to be from UPS claims that a parcel lost in the Christmas rush has now been found and sent. The email contains a link that supposedly opens a shipment label for the parcel
    Published: June 7, 2013

  • Facebook Account Locked Due to Malware Warning
    Message circulating on Facebook warns users not to click on a popup window advising that their Facebook account has been temporarily locked because malware has been detected on their computer. According to the message, clicking "continue" on the popup will install a virus that will wipe out the user's computer.
    Published: May 29, 2013

  • Citibank Paymentech Billing Statement Malware Emails
    Email purporting to be from Citibank Paymentech invites recipients to open an attached file to view a Merchant Billing Statement.
    Published: May 7, 2013

  • 'Wire Transfer Canceled' Malware Email
    Email purporting to be from the US Federal Reserve claims that a wire transfer sent from the recipient's bank account was not processed and that details about the transfer can be viewed in an attached file.
    Published: May 1, 2013

  • Fake Cover-More Insurance Emails Carry Malware
    Email purporting to be a policy purchase notification from Australian travel insurance provider Cover-More urges recipients to open an attached .zip file to view a Certificate of Insurance.
    Published: April 17, 2013

  • Fake CNN Emails About Pope Point to Malware
    Emails purporting to be CNN notifications suggest that recipients click a link to read CNN.com articles relating to the pope.
    Published: March 20, 2013

  • 'You Have Received a Secure Message' Malware Emails
    Email claims that you have received a secure message which can be read by opening an attached file.
    Published: December 13, 2012

  • Australian Power & Gas 'Payment Receipt' Malware Emails
    Email purporting to be from Australian Power & Gas claims that recipients can review details of a recent credit card transaction by opening an attached file.
    Published: December 11, 2012

  • RapidFax Malware Email
    Email purporting to be from fax to email service RapidFax claims that a received fax can be viewed by opening an attached file.
    Published: December 5, 201

  • Jetstar 'Flight Itinerary' Malware Email
    Email purporting from Australian airline Jetstar, claims that recipients can view a flight itinerary by opening an attached file.
    Published: November 29, 2012

  • Fake Tsunami Warning 'News' Report Points to Malware
    Email designed to resemble a news report claims that Australian earthquake and volcano experts have predicted that a massive tsunami will hit Australia on New Year's Eve. The message asks recipients to click a button to watch a video about the prediction.
    Published: November 19, 2012

  • USPS Malware Emails
    Email purporting to be from the United States Postal Service (USPS) claims that a parcel could not be delivered due to an address error and instructs recipients to click a link to print out a shipping label.
    Published: November 5, 2012

  • LinkedIn 'Invitation to Connect' Malware Emails
    Email purporting to be from business focused social network, LinkedIn asks recipients to click buttons to accept or ignore an invitation to connect to a LinkedIn user.
    Published: October 17, 2012

  • ADP 'Transaction Reports' Malware Email
    Email purporting to be from payroll company ADP claims that the recipient's bank account will be debited for the amount shown on a transaction report that can be viewed by clicking a link in the message.
    Published: October 15, 2012

  • Better Business Bureau 'Complaint Received' Malware Emails
    Email purporting to be from the Better Business Bureau claims that a complaint has been received about the recipient. The recipient is advised to click a link and provide a response or risk cancellation of BBB accreditation status.
    Published: September 26, 2012

  • All-In-One Shopping Voucher Malware
    Email claims that several British supermarket chains have collaborated to offer customers an all-in-one shopping voucher worth ?30. The email asks users to click a link for more information and to download the shopping voucher.
    Published: September 12, 2012

  • Fake AT&T Bill Emails Point To Malware
    Email purporting to be from phone service provider AT&T claims that the recipient's bill is ready for viewing. The recipient is urged to click a Login button to access the bill online.
    Published: August 7, 2012

  • Hotel Booking Confirmation Malware Emails
    Notification emails purporting to be from Booking.com claim to be hotel room booking confirmations and urge recipients to open an attached file to view reservation details.
    Published: July 24, 2012

  • Intuit "Payroll Processing Request" Malware Email
    "Payroll processing" emails purporting to be from financial software provider Intuit, claim that are large amount of money is about to be withdrawn from the recipient's bank account to cover employee paychecks. The recipient is invited to click a link in the message to download payroll details.
    Published: July 23, 2012

  • Paypal 'You Sent a Payment' Malware Emails
    Emails purporting to be from Paypal claim that the recipient has sent a payment to a person or vendor. The recipient is instructed to click a link to view or confirm transaction details.
    Published: 30th May 2012

  • American Express 'Verify User ID' Malware Email
    Email purporting to be from American Express asks if the recipient recently tried to verify his account ID or change the account password.
    Published: 21st May 2012

  • Bogus Verizon Wireless Bill Email Points to Malware
    Email purporting to be from Verizon Wireless claims that the recipient's current bill is available online and invites him or her to click a link to view and pay the bill.
    Published: 20th April 2012

  • US Airways 'Flight Confirmation' Malware Emails
    Emails purporting to be from US Airways claim to contain a flight confirmation code and suggest that users click a link to check in online and confirm reservation details.
    Published: 5th April 2012

  • RIAA Notification of Copyright Violation Malware Email
    Email purporting to be from the Recording Industry Association of America (RIAA) claims that the recipient's IP address has been identified as distributing copyrighted content and instructs him or her to open an attached file to view details.
    Published: 21st February 2012

  • Bogus Seattle Traffic Ticket Email Points To Malware
    Email purporting to be from the Seattle Police Department claims that the recipient has been given a traffic ticket for speeding. Recipients are invited to click a link to plead their case.
    Published: 20th January 2012

  • Bogus Amazon Shipping Confirmation Emails Point To Malware
    Emails, purporting to be from Amazon.com, supposedly provide shipping and order details about recent purchases and urge recipients to follow links to track the package or manage orders.
    Published: 30th December 2011

  • American Airlines Flight Ticket Order Malware Emails
    Emails purporting to be ticket order notifications from American Airlines claim that the recipient can follow a link or open an attachment to print out airline tickets.
    Published: 7th December 2011

  • Bogus Windows Firewall and Security Center Update Email Links To Malware
    Email purporting to be from Microsoft Canada instructs recipients to click a link in order to download and install a high priority security update for the Microsoft Windows Firewall and Security Center.
    Published: 13th October 2011

  • Australia Post Undelivered Package Malware Emails
    Emails purporting to be from Australia Post claim that the delivery of a package to the recipient has failed because of an addressing error. The messages instruct recipient to open an attached file to read more information about the package.
    Published: 19th September 2011

  • Your Credit Card is Blocked' Malware Emails
    Emails purporting to be from credit card providers claim that the recipient's credit card has been blocked due to a suspicious withdrawal. The messages instruct the recipient to open an attached file to view more detailed information.
    Published: 19th September 2011

  • Australian Taxation Office 'New Rules' Malware Emails
    Emails purporting to be from the Australian Taxation Office (ATO) claim that new rules for ABN numbers are being introduced and that recipients should follow a link in the message to access more information about the changes.
    Published: 15th September 2011

  • Sleazy Online Dating Emails Carry Malware
    Series of sleazy emails purporting to be from an adult orientated website, claim that recipients can view photographs of available girls by opening an attached file.
    Published: 8th September 2011

  • ACH Payment Canceled Malware Email
    Email purporting to be from the Automated Clearing House (ACH) claims that a recent payment made by the recipient has been canceled and that he or she should open an attached file to review details.
    Published: 26th August 2011

  • Hotel "Wrong Transaction" Malware Emails
    Emails purporting to be from various hotels in the United States claim that a "wrong transaction" has been discovered on the user's credit card and that he or she should fill in an attached refund form to allow return of the funds.
    Published: 3rd August 2011

  • Credit Card Overdue Malware Email
    Email claims that the recipient's credit card is overdue and that he or she should open an attached file to review a financial statement.
    Published: 9th July 2011

  • 'Uniform Traffic Ticket' Malware Email
    Email claiming to be a notification of a traffic ticket for speeding from the New York State Police urges the recipient to print out the ticket contained in an attached file and post it to the Town Court.
    Published: July 6, 2011

  • IRS 'Unable To Process Your Tax Return' Malware Email
    Email purporting to be from the IRS claims that the recipient's tax return was not able to be processed and that he or she should fill out and return forms contained in an attached file in order to rectify the problem.
    Published: 5th July 2011

  • McDonald's 'Free Dinner Day' Malware Email
    Email purporting to be from fast food giant McDonald's claims that the recipient can print out an attached invitation to receive a "Free Dinner Day" meal on June 26, 2011.
    Published: 22nd June 2011

  • FBI 'You Visit Illegal Websites' Malware Email
    Email purporting to be from the FBI claims that the recipient has been logged visiting illegal websites and is required to answer a list of questions contained in an attached file.
    Published: 10th May 2011

  • DHL Notification Malware Email
    Email purporting to be from international mail delivery service DHL claims that a parcel has been sent to the recipient. The message advises the recipient to open an attached file to view the parcel tracking number and access more information about the delivery.
    Published: March 12, 2011

  • Post Express 'Incorrect Delivery Address' Malware Emails
    Email purporting to be from "Post Express Support", claims that a package sent by the recipient has been returned because of incorrect delivery details. The email instructs the recipient to open an attached file to print out a mailing label.
    Published: 9th February 2011

  • Google Romance Malware Email
    Email purporting to be from Google Romance urges recipients to follow a link in order to logon to Google Romance to read messages.
    Published: 3rd December 2010

  • FedEx Incorrect Delivery Address Malware Email
    Email purporting to be from delivery company FedEx claims that a package en route to the recipient has been returned due to an addressing error and that he or she must open an attached file to print a mailing label in order to receive the package.
    Published: 12th November 2010

  • Fake LinkedIn Invitation Emails Point to Malware
    Emails purporting to be from social network LinkedIn ask recipients to click a link to view pending invitation messages.
    Published: 27th September 2010

  • Distracting Beach Babes Facebook Malware Attack
    A rogue Facebook Application is posting links on Facebook Walls that supposedly open a video showing "Distracting Beach Babes".
    Published: 25th May 2010

  • Delta Air Lines Passenger Itinerary Receipt Malware Emails
    Email purporting to be from Delta Air Lines provides details of a supposed ticket purchase and instructs recipients to open an attached file to view a passenger itinerary receipt.
    Published: 12th March 2009

  • Obama Malware Emails
    In the wake of the US Presidential election, inboxes around the world are being hit by malware emails supposedly providing news about Barack Obama's historic win.
    Published: 10th November 2008

  • Fraud Transactions Warning Malware Email
    Email warns that the recipient's credit card has been involved in fraudulent transactions.
    Published: 10th October 2008

  • Internet Access Suspended Malware Email
    Email claims that the recipient's Internet access is going to be suspended because the 'Internet Service Provider Consorcium' has logged illegal activities from his or her computer.
    Published: 17th September 2008

  • Virus Complaint Email Carries Malware
    Threatening "complaint" email accuses the recipient of sending emails containing viruses and instructs him or her to open an attachment supposedly containing email log files.
    Published: 11th September 2008

  • Internet Explorer 7 Latest Version Malware Email
    Email that appears to be from Microsoft instructs the user to download the latest version of Internet Explorer 7 by clicking a link included in the message.
    Published: 15th August 2008

  • Not Able to Deliver UPS Package Malware Email
    Email purporting to be from delivery company, UPS, claims that a package sent by the recipient could not be delivered. The message instructs the recipient to open an attachment to print out an invoice.
    Published: 16th July 2008

  • Already Gone To Hospital Malware Email
    Threatening email claims that the sender will find you and cripple you and states that another person involved has already gone to hospital.
    Published: 24th April 2008

  • United States District Court Subpoena Malware Email
    Email purporting to be a subpoena from the United States District Court informs recipients that they must appear and testify before a Grand Jury
    Published: 16th April 2008

Apple inside orange - oddities

©Depositphotos.com/ urfingus