Heute habe ich in verschiedenen E-Mail Konten folgende Mail gefunden. Die E-Mail enthält einen Anhang der scheinbar eine word Datei ist. Diesen jedoch auf keinen Fall öffnen!
Betreff: „Aline: Tax Invoice #40525“
Inhalt:
Good day,
Please find attached Tax Invoice as requested.
Many thanks for your call.
Bruce Sharpe.
Screenshot der E-Mail mit Anhang:
Update (30.11.2015) – etliche weitere Mails erhalten „Your order number (PC299139PPS) has been authorised“
z.B.
Your order number (PC299139PPS) has been authorised
Calls to 0871 numbers cost between five and ten pence per minute from BT landlines but calls from other operators and mobiles may cost more.
Calls to this number cost between 5 and 10 pence per minute from BT landlines but calls from other operators and mobiles may cost more.
Please note that calls to CVL may be recorded for quality and training purposes.Registered in ENGLAND :: LS19 7ZA :: Company Number – 759126 :: VAT Number – 834 8748 86
This email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. The content of the email should also be considered primarily as opinion or comment and not as a statement of fact. If you are not the intended recipient, you are hereby notified that any use or dissemination of this communication is strictly prohibited. If you have received this email in error, please advise the sender immediately and delete it. We believe that this e-mail and any attachments are free from any virus or other defects which may affect any computer system, but it remains the responsibility of the recipient to ensure that it is virus free. CVL accept no responsibility for any loss or damage arising in any way from its use.
Infos zur E-Mail
Den Anhang auf keinen Fall öffnen(!) Es ist zwar „nur“ ein Worddokument und keine Excel oder zip Datei. Dennoch ist diese Mail alles andere als sauber.
Im Besten Fall ist dort nur Spam in der Worddatei versteckt. Im ekligeren Fall gibt es eine Schwachstelle in Word, die es Angreifern erlaubt manipulierte Worddateien zu generieren, welche den eigenen PC schaden/ausspionieren.
Ich habe keine Ahnung was in der Datei ist(!) Möchte es aber auch nicht testen 😉
Hat jemand Infos dazu, ob es nur Spam oder manipulierte Word-Dateien sind?