Our spam traps have been seeing a widespread malicious attack today, posing as a communication from Western Union.
The emails have a subject line of
Western Union Transfer MTCN: <random number>
and an attached file called MTCN_NR8621982.zip.
Part of the email reads as follows:
The money transfer you have sent on the 13th of March has not been collected by the recipient.
According to the Western Union agreement the transfers which are not received in 15 days are to be returned to sender. To collect cash you need to print the invoice attached to this e-mail and visit the nearest Western Union branch.
Of course, opening the attached file wouldn’t be the smartest move you’ve ever made in life, as it contains a malicious Trojan horse.
Interestingly, the malicious emails append some text to the bottom of each message to make it appear as though your mail gateway has scanned the message and determined it not…
Read more in my article on the Naked Security website.
Found this article interesting? Follow Graham Cluley on Twitter or Mastodon to read more of the exclusive content we post.
