Debunking hoaxes and exposing scams since 2003!

Jump To: Example    Comments   References

MALWARE - 'Urgent Notice Online Transaction Cancelled'

Jump To: Example    Comments   References

According to an 'urgent' email that is currently hitting inboxes, an online transaction recently sent from your bank account has been cancelled by your bank.

The email suggests that you open an attached Microsoft Word document to read more about the issue.

However, the email is not from any bank and the attachment does not contain information about a cancelled transaction.

If you open the attachment, a document will be loaded that displays the following message:
Attention! This document was created by a newer version of Microsoft Office. Macros must be enabled to display the contents of the document.
The document then provides information explaining how to enable macros for various versions of Microsoft Word (see screenshot below).

However, if you enable macros as instructed, a malicious macro will download and install malware on your computer. This malware may download further malware, harvest personal information from the infected computer, and join the infected computer to a botnet.

Unless you have a specific need to use macros, it is best to leave them disabled.

To read more about macros and how they can pose a threat to your computer, refer to this earlier Hoax-Slayer article.

Macro Virus Threat Returns - Beware Emails With Malicious Word Attachments



Bookmark and Share

related Links

Related Links

Identity theft is one of the fastest growing crimes in the world. Learn how to stay safe online with Hoax-Slayer's comprehensive eBook:


Subject: Urgent Notice!!! Dispute No F863540

Good day,

The online transaction (#: 749554021), recently sent from your bank account, was cancelled by the bank.

Please see the statement provided with this email to get more info about this problem.

Important If you have any problems with viewing the document, please save it on your PC before opening. A special details on the Word document must be opened only via MS Word on Win PC.

Macro Malware Document

Last updated: March 17, 2015
First published: March 17, 2015
By Brett M. Christensen
About Hoax-Slayer

Macro Virus Threat Returns - Beware Emails With Malicious Word Attachments

More stories!

'Internet Capacity Warning' Phishing Scam
According to this email, which claims to be from the 'Support Department' at 'Information Technology Services', your internet capacity is 70% full and you therefore need to contact support to avoid problems.
Published: July 6, 2015

Kroger 'Free Coupons' Survey Scam
Message being distributed across Facebook claims that users can receive free coupons from American retailer Kroger just by sharing a message and visiting a third party website to claim their prize.
Published: June 16, 2015

Pointless Facebook Warning - Hackers Posting Insulting Messages or Sexual Content In Your Name
'Hacker' alert messages circulating on Facebook claim that, without your knowledge, hackers are posting insulting or sexual messages that appear to come from you onto your Facebook Timeline.
Published: June 3, 2015