Fake Groupon discount emails carry malware

GrouponCybercriminals have spammed out malware, attached to emails claiming to be related to discounts for offers on Groupon.

The emails, which have the poorly spelt subject line of “Groupon dicount gifts” (in itself something which should ring alarm bells), pretend to come from Groupon, and claim that one of your friends has found a deal on the website.

The website says that your friend has decided to share the deal with you, and that you are receiving a discount code as a result.

Sign up to our free newsletter.
Security news, advice, and tips.

Part of the email reads:

Hi there!
You're going to love it
We are glad to inform you that one of your friends has found a great deal on Groupon.com!
And even shared it with you!

Yeah! Now Groupon.com gives an opportunity to share a discount gift with a friend!
Enjoy your discount gift in the attachement and share it with one of your friend as well.

All the details in the file attached. be in a hurry this weekend special is due in 2 days!

Attached to the emails is a file called Gift coupon.zip, which contains a Trojan horse designed to infect Windows computers.

Sophos products detect the malware as Troj/Bredo-ABB and Mal/BredoZp-B.

As always, keep your anti-virus up-to-date and your wits about you. It’s easy for anyone to make a professional-looking email using the branding of a well-established website in their attempt to lure you into opening an attached file or clicking on a dangerous web link.


Graham Cluley is an award-winning keynote speaker who has given presentations around the world about cybersecurity, hackers, and online privacy. A veteran of the computer security industry since the early 1990s, he wrote the first ever version of Dr Solomon's Anti-Virus Toolkit for Windows, makes regular media appearances, and is the co-host of the popular "The AI Fix" and "Smashing Security" podcasts. Follow him on Bluesky, Mastodon, and Threads, or drop him an email.

What do you think? Leave a comment

Your email address will not be published. Required fields are marked *

This site uses Akismet to reduce spam. Learn how your comment data is processed.