Scammers are currently posing as eBay and sending fake emails.

Apparently the e-recipient receives the “tax invoice” for the month 04/2018 as an attachment. You should now log in with the seller account in the tax document so that you can view the account.

But be careful: This is a malicious PDF file attachment in which fraudsters have installed various “Java scripts”.

This is the current email:

image

 

The email as text:

Hello [recipient email address],

Enclosed we will send you the electronically generated tax invoice for the month 4/2018 as a PDF document. Please note that this is not a request for payment.

Please log in to your seller account to view your account summary using the Tax Documents link in the Reports section or to request copies of other tax invoices.

If you have any further questions, please contact our seller service.

Kind regards
eBay Europe S.à rl

A qualified digital signature was attached to this electronic invoice. To classify the certificate as trustworthy, please proceed as follows:
1. Click on “Signature window” at the top right.
2. The signature menu opens. Expand the drop-down menu there, show the signature properties and click on “Show issuer certificate”.
3. In the certificate display, click the “Trust” tab and then click “Add to Trusted Certificates”. Confirm with “OK”.
4. In the “Import Contact Settings” box, make sure the “Use this certificate as a trusted root” option is selected, click “OK” and confirm with “OK” again.

© 2018 eBay Inc., eBay Europe S.à rl 22-24 Boulevard Royal, L-2449, Luxembourg

We checked the file attachment and it turned out that it is some kind of Trojan:

image

Please read: Important notice

What is a TROJAN?

Trojans are standalone programs (.exe) that pretend to be something other than what they really are. When you run the file, it seems like nothing is happening.

But that's not true! A program is installed in the background.

The programs or internet fraudsters behind such programs now have access to your data or can also have complete control over your computer.

The most telltale of all file attachments is the .zip attachment. Emails from trustworthy sources never come as .zip files, not even as .com /.pif / .ico / .scr/ .exe. Please do not open and execute the contents unless you consciously expect such a file.

1) Anyone who opens or has opened the file attachment and has also executed the content (this is the critical point!) should first have their PC scanned by a virus scanner .
2) Change all passwords to social networks, online shops, etc. As a precaution, please also notify your bank or credit card company.

Your email account sends these emails itself?

If you get tons of error messages that your emails have not reached the recipient (and every minute), then your computer is infected and active in a botnet .
Here, too, check the PC immediately and, if necessary, consult an expert on site. Another alternative is to use the EMERGENCY CD from Kaspersky


If you enjoyed this post and value the importance of well-founded information, become part of the exclusive Mimikama Club! Support our work and help us promote awareness and combat misinformation. As a club member you receive:

📬 Special Weekly Newsletter: Get exclusive content straight to your inbox.
🎥 Exclusive video* “Fact Checker Basic Course”: Learn from Andre Wolf how to recognize and combat misinformation.
📅 Early access to in-depth articles and fact checks: always be one step ahead.
📄 Bonus articles, just for you: Discover content you won't find anywhere else.
📝 Participation in webinars and workshops : Join us live or watch the recordings.
✔️ Quality exchange: Discuss safely in our comment function without trolls and bots.

Join us and become part of a community that stands for truth and clarity. Together we can make the world a little better!

* In this special course, Andre Wolf will teach you how to recognize and effectively combat misinformation. After completing the video, you have the opportunity to join our research team and actively participate in the education - an opportunity that is exclusively reserved for our club members!


Notes:
1) This content reflects the current state of affairs at the time of publication. The reproduction of individual images, screenshots, embeds or video sequences serves to discuss the topic. 2) Individual contributions were created through the use of machine assistance and were carefully checked by the Mimikama editorial team before publication. ( Reason )