Once again , email users should be extremely cautious as fake messages purporting to contain a payment receipt are circulating. The scam is part of a campaign designed by cybercriminals to distribute malware .
Cisco's security service detected a significant volume of these emails since October 1st, but the company issued a second warning on October 9th.
One version of the email comes with an attachment (Bank Slip.rar) that contains a malicious .scr file. When the victim runs the file, it infects their computer. A second variant of the fake alerts has a completely different content and carries a malicious executable file inside a .zip file
Below are the messages:
Example 1:
“Payment Slip”
"Dear Sir /Madam
How are you? Thanks for your e-mail, Attachment is the payment slip. I await your confirmation.
Best regards
Smith."
Example 2:
"Dear Sir/Madam,
The attached payment advice is issued at the request of our customer. The advice is for your reference only.
Yours faithfully,
Global Payments and Cash Management
HSBC"
