Don’t open that Western Union Transfer email

Graham Cluley
@gcluley

Our spam traps have been seeing a widespread malicious attack today, posing as a communication from Western Union.

The emails have a subject line of

Western Union Transfer MTCN: <random number>

and an attached file called MTCN_NR8621982.zip.

Part of the email reads as follows:

The money transfer you have sent on the 13th of March has not been collected by the recipient.
According to the Western Union agreement the transfers which are not received in 15 days are to be returned to sender. To collect cash you need to print the invoice attached to this e-mail and visit the nearest Western Union branch.

Of course, opening the attached file wouldn’t be the smartest move you’ve ever made in life, as it contains a malicious Trojan horse.

Interestingly, the malicious emails append some text to the bottom of each message to make it appear as though your mail gateway has scanned the message and determined it not…

Read more in my article on the Naked Security website.

Found this article interesting? Follow Graham Cluley on Twitter to read more of the exclusive content we post.


Graham Cluley is a veteran of the anti-virus industry having worked for a number of security companies since the early 1990s when he wrote the first ever version of Dr Solomon's Anti-Virus Toolkit for Windows. Now an independent security analyst, he regularly makes media appearances and is an international public speaker on the topic of computer security, hackers, and online privacy. Follow him on Twitter at @gcluley, or drop him an email.