'Invoice Number' Malware Emails
When it comes to dirty tricks on the Internet, sometimes even the most simple can be effective.
Take this current malware campaign for example. The emails used in the campaign have the subject line 'Invoice Number:' along with a random string of digits. The body of the emails just repeats the subject line and adds a note specifying the number of pages. The attached .zip file is named after the invoice number included in the subject line and text.
And that is all there is to it. The messages do not mention where the supposed invoice comes from or what it pertains to. The criminals operating this campaign hope that at least a few recipients will go ahead and open the attachment in the hope of finding out what the supposed invoice is all about. In the case of such malware attacks, curiosity can kill the cat and any satisfaction will be afforded only to the criminals.
Of course, the attachment does not contain any sort of invoice. The .zip file harbours a malicious .exe file. If opened, this .exe file can install malware on your computer. The exact type of malware may vary. But, typically, such malware can download more malware, steal personal information, and allow the criminals to control the infected computer.
Cybercrooks commonly use fake invoice emails to distribute malware. Be wary of any unsolicited email that claims that you can access an invoice or payment document by clicking a link or opening an attached file.
Identity theft is one of the fastest growing crimes in the world. Learn how to stay safe online with Hoax-Slayer's comprehensive eBook:
Subject: Invoice number: 9129753913
Invoice number: 9129753913
Last updated: June 8, 2015
First published: June 8, 2015
By Brett M. Christensen
Fake 'Simply Carpets' Invoice Email Carries Malware
Malware Threat Articles