'Currency Rate Change' Malware Email
This email supposedly contains information about an upcoming change in currency rates between US dollars and euros. It suggests that you open an attached file to review a document with more details about the exchange rate change.
It notes that the information is confidential and advises that you can contact the sending 'Associate' via phone should you have any questions.
However, the email is not from any legitimate financial expert or business associate and the attachment does not contain currency rate information.
Opening the attached .zip file will reveal a .exe file that supposedly contains the promised document. However, opening the .exe file on a Windows computer can install malware. The exact purpose of this malware may vary. Typically, such malware can download and install even more malware, harvest information from the infected computer, and allow criminals to take control of the computer and use it for their own purposes.
The scammers hope that at least a few recipients, perhaps working in a busy business environment, will be tricked into opening the attachment and installing the malware. It can be easy for busy or distracted people, especially those that are less computer savvy, to open such attachments without due forethought.
Details such as subject lines and the name of the supposed sender may vary in different versions of the malware messages. If you receive one of these malware emails, do not open any attachments or click any links that it contains.
Identity theft is one of the fastest growing crimes in the world. Learn how to stay safe online with Hoax-Slayer's comprehensive eBook:
Good day! Please be informed that effective from Monday is altered the currency exchange rate (USD-EUR).
The new rate becomes considerably higher, taking into account the existing rate of 0.889. For Your review
is enclosed the document that contains all the details and the proposed behaviour of mentioned
currencies for upcoming month. Please mind that document details are confidential and directed
for Your consideration only. If You have any questions feel free to contact
me by phone: [removed]. Best regards, Peter [Removed] Associate
Attachment name: informed_id_81142_contact.zip
Zip contains file named: Copy_Documents_info.exe
Last updated: June 18, 2015
First published: June 18, 2015
By Brett M. Christensen
Malware Threat Articles