Debunking hoaxes and exposing scams since 2003!

Jump To: Example   References

Fake Payment Summary Malware Email Targets Australian Taxpayers

Jump To: Example   References

This email supposedly contains an attached copy of your payment summary for the 2014/15 financial year. It is apparently aimed at people working in the health sector and claims to be from Recruitment and Employee Transactional Services at HealthShare NSW. It includes links to HealthShare NSW and to the Australian Taxation Office (ATO).

However, the email is not legitimate and the attached file does not contain a payment summary.

Instead, the attached .zip file contains a malicious executable file that, if opened, can install malware on your computer. The exact type of malware payload may vary. Typically, however, such malware can download further malware components, steal sensitive information, and allow criminals to access and control the infected computer.

The email capitalises on the fact that many Australians may currently be in the process of preparing their tax returns. Thus, recipients, especially if they are busy or distracted, may open the attached file without due caution.

If you receive one of these emails, do not click any links or open any attachments that it contains.



Bookmark and Share


Please find attached a copy of your 2014/15 Payment Summary (Group Certificate).

Note: You will receive a separate payment summary for each Health Agency you worked for during the 2014/15 financial year. Payment Summaries are also available in Employee Self Service.

Further information, including fact sheets:

For taxation advice and information, visit

Thank you,

Recruitment and Employee Transactional Services
HealthShare NSW

This message is intended for the addressee named and may contain confidential information. If you are not the intended recipient, please delete it and notify the sender.

Views expressed in this message are those of the individual sender, and are not necessarily the views of NSW Health or any of its entities.

Attached .zip file: Contains: EoY-2014-15-04831806-000718002.scr

Payment Summary Malware Emails

Last updated: September 15, 2015
First published: September 15, 2015
By Brett M. Christensen
About Hoax-Slayer

Malware - NSW Ministry of Health