OyaYansa Posted August 25, 2017 Posted August 25, 2017 Check your inbox carefully because it is possible that a fake invoice attempts to infect your computer with malware. The Office of Homeland Security (OSI) of the National Institute of Cybersecurity (INCIBE) warns that a new campaign has been detected that uses this strategy to deceive the victims, causing them to download and execute a malicious attachment. The mechanics do not differ much from other attacks of similar characteristics that we have seen in the last months. Cybercriminals spread malicious emails that have attached an Excel document with XLS extension or a compressed file in ZIP format. In all detected samples the files are named with sequences that combine numbers and letters, for example 08.2017_FACTURA.zip or FACV201700005155.xls. The text of the message is very brief and, unlike other spam campaigns, is well drafted. In all the versions that have been detected the only thing that says is that the requested invoice is attached. The Excel file that is attached in the email pretends to be a conventional bill, but the data does not seem to load properly. At the top the user is instructed to click on the Enable content of the security warning button. The document contains macros that execute malicious code on the PC, so they install malware in case the victim enables the macros. The OSI has performed a virus analysis with Virustotal and it is a Trojan. To avoid being a victim of this type of attacks, always distrust that you receive an unsolicited email and in no way download the attachments sent by an unknown sender. If you detect unwanted communications delete them directly without opening them, and try not to enable macros in Microsoft Office programs, as they could infect your computer with malware.
Recommended Posts