Computers, Software and Technology Help and Advice - Mobiles/Internet/Virus Warnings Tips

Friday, 13 November 2015

November Invoice INV-9771 from Eye on Books

Latest virus email. This is not a genuine email from Xero.com and they have no knowledge of these as the email sender is being faked. Just delete the email and don't open the attachment.

From Sanesecurity http://sanesecurity.blogspot.co.uk/2015/11/your-new-telstra-bill-for-account.html

These word/excel attachments normally try to download either...

Dridex banking trojan,
Shifu banking trojan

... both of which are designed to steal login information regarding your bank accounts either by
key logging, taking screen shots or copying information directly from your clipboard (copy/paste)

===================================================================

Subject: November Invoice INV-9771 from Eye on Books

Attachment: Invoice INV-9771.xls

Hi,

Please find attached this months invoice for Xero & Receiptbank software. You've completed a direct debit form, so this will have been paid from your nominated account, so please don't send through payment seperately.

Thanks again for your business, it's greatly appreciated.

Kind regards,

Charles Klvana

EYE ON BOOKS

Email Scam - Your new Telstra bill for account 2000514059862 is attached

Latest email scam with virus/Trojan attachment is shown as coming from telstraemailbill_noreply8@online.telstra.com but this is not a genuine email from Telestra. Just delete it as the attachment will contain a virus trying to steal your bank details

Subject :Your new Telstra bill for account 2000514059862 is attached

Your account number: 2000514059862

This bill number: 1107991874

Hi ,

Your new Telstra bill is attached. Please pay your bill by its due date of 30 Nov 2015.

We recommend making your payment online at telstra.com/paybill.

Like to know more?

If you have any questions or concerns about this email you can get in touch with us at telstra.com/contact.

Friday, 6 November 2015

Virus Phishing Trojan Email - Subject Invoice From Timber Solutions Attachment Esale.XLS

One of the latest phishing/virus/trojan email is from Kes kerryadamson@bigpond.com with subject "Invoice #00004232; From Timber Solutions" and with attachment Esale.xls

This file is a virus and should not be opened. If you have opened then I'd strongly recommend running anti virus software on your PC over a few days to make sure any new virus is detected as it can take a couple of days for new ones to be added to virus signature files

These word/excel attachments normally try to download either...

Dridex banking trojan,
Shifu banking trojan

Invoice #00004232; From Timber Solutions

Hi, please find attached our invoice for goods ordered under Order No. 11146, which will be delivered tomorrow. Please pay into the account, details of which are at the foot of the invoice. Kes

Thursday, 22 October 2015

UU Scotland Email Malware Spam Virus 22 October 2015 Invoice Summary.doc

A new version of this email is now being sent out, with a different file that AV is not detecting. This has been submitted to Mcafee for analysis but as always just delete the email.

==================================================

A large volume of emails are being sent out purporting to be from United Utilities Scotland with an attachment 22 October 2015 Invoice Summary.doc

This attachment contains a Trojan/virus that will download various malware to your PC. Do not open the attachment and just delete the email. United Utilities serve the North West of England

Water Services Invoice from United Utilities Scotland

We believe that somewhere between 10 million and 100 million copies of this Virus Trojan email have been sent out and United Utilities have had over 1 million bounce back messages from emails sent to invalid email addresses sent to their servers from invalid email addresses. UU Scotland have now shut down their email servers for these email addresses which gives some indication of how serious this issue is for them.

To be clear - this message was NOT sent by UUSCOTLAND (UUSCOTLAND@uuplc.co.uk) and their email address has been spoofed. You do not need to report it to UU or to Melissa Lears mentioned in the email.

More info here:

http://www.unitedutilitiesscotland.com/important-information.aspx

===========================================

UUSCOTLAND

Good Morning,

I hope you are well.

Please find attached the water services invoice summary for the billing period of 12 September 2015 to 12 October 2015.

If you would like any more help, or information, please contact me on 0345 0726077. Our office is open between 9.00am and 5.00pm Monday to Friday. I will be happy to help you. Alternatively you can email me at uuscotland@uuplc.co.uk.

Kind regards

Melissa

Melissa Lears

Billing Specialist

Business Retail

Wednesday, 21 October 2015

Email Trojan Malware INVOICE FOR PAYMENT - 7500005791 from Lyn.Whitehead lancashire.pnn.police.uk

Latest email containing malware/Trojan appears to come from Whitehead, Lyn Lyn.Whitehead@lancashire.pnn.police.uk

This is probably a genuine email address and genuine person but not a genuine email. Strongly recommend you just delete and do NOT open. If already opened then full virus scan recommended.

It's not actually being sent from a PNN email address, it's purely a spoofed sender so it appears like it has come from them. They have no connection with it and no control over someone sending it out.
Almost certainly contains the Dridex malware/Trojan as many similar ones have over the last few weeks

EMail content follows:

INVOICE FOR PAYMENT - 7500005791

Hello

Please find attached an invoice that is now due for payment.

Regards

Lyn

Lyn Whitehead (10688)

Business Support Department - Headquarters

Email: Lyn.Whitehead@lancashire.pnn.police.uk

It's not being sent from a PNN email address, it's purely a spoofed sender so it appears like it has come from them. They have no connection with it and no control over someone sending it out.
Almost certainly contains the Dridex malware/Trojan as many similar ones have over the last few weeks

Tuesday, 20 October 2015

Ocado Email Spam Virus Receipt "Your Receipt for Today's Ocado Delivery" - Fake Phishing Attack Email

A large volume of phishing emails have been sent out purporting to be from Ocado with a receipt attached. The attachment almost certainly contains the Dridex trojan/virus stealing bank details so just delete the email and attachment.

This email is NOT from Ocado; the sender has "spoofed" the sender address to make it appear like that but they have nothing to do with it and cannot stop any spammers/criminals sending emails in their name.

If you try to open the attachment RECEIPT.doc it will request Macro access when it then downloads trojan files to your PC to steal your bank login details. So far it has been reported that £20 million has been stolen from UK bank customers by this virus/trojan. This is pure and simple a criminal attack to steal money.

If you have opened the attachment you should use a virus scanner to check your PC and make sure it is clean of any viruses.

"Your Receipt for Today's Ocado Delivery"

"Your Receipt for Today's Ocado Delivery"

Hello

Your receipt for today’s delivery is attached to this email. I’ll be delivering your 12:00-14:00 order and, so you’ll know it’s me, I’ll be driving the Lemon van.

Your order doesn’t have any substitutions, everything’s there.

See you later,

Paul

Tuesday, 13 October 2015

Virus Trojan Email about Water Services Invoice from United Utilities Scotland (UUSCOTLAND)

A large volume of emails are being sent out purporting to be from United Utilities Scotland with an attachment 12 October 2015 Invoice Summary.doc

This attachment contains a Trojan/virus that will download various malware to your PC. Do not open the attachment and just delete the email. United Utilities serve the North West of England