This month there is again a warning about the “telecom bill”, which carries a dangerous Trojan.

Mimikama: Warning

The email bears the date of issue November 2015 and, as so often in the past, also has the fraudulent signature of Ralf Hoßbach, Head of Customer Service.

image

The amounts stated may vary, but are quite high. In the email shown here the amount is €725.10:

Your invoice for November 2015

Hello ***@versanet.de,

You will receive your current landline bill in this email.
The total for the month of November 2015 is: 725.10 euros.
In connection with your guilt. If payment is not received by November 25, 2015, we have the right to prevent the provision of services.

Attached to this letter are documents in a zip archive with details of the services, which must be read carefully.
For further questions about InvoiceOnline, your invoice or payment, we offer you a comprehensive range of help.
Information about the security features of BillOnline can be found under Security information. Best regards

The choice of a high amount is of course fictitious and a psychological means of pressure to check the alleged invoice.

[adrotate group=“1″]

Trojan attached!

The content of the attachment in this email is a Trojan! It is a .zip file with an executable .js (javascript) inside.

The contents of this .zip file, whose name is in the form of an invoice number, shows clearly after a scan for malware : there is a malware in this .zip file!

image

General Trojan warning

Trojans are standalone programs (.exe) that pretend to be something other than what they really are.

When you run the file, it seems like nothing is happening.

But that's not true! A program is installed in the background. The programs or internet fraudsters behind such programs now have access to your data or can also have complete control over your computer.

The most telltale of all file attachments is the .zip attachment.
Emails from trustworthy sources never come as .zip files, not even as .com /.pif / .ico / .exe/ .js. Please do not open and execute the contents unless you consciously expect such a file.

1) Anyone who opens or has opened the file attachment and has also executed the content (this is the critical point!) should first have their PC scanned by their virus scanner .

2) Change all passwords to social networks, online shops, etc.

As a precaution, please also notify your bank or credit card company.

Your email account sends these emails itself?

If you get tons of error messages that your emails have not reached the recipient (and every minute), then your computer is infected and active in a botnet . Here, too, check the PC immediately and, if necessary, consult a local expert

Another alternative is to use the EMERGENCY CD from Kaspersky

Article preview image: zuper_electracat / Shutterstock.com

Notes:
1) This content reflects the current state of affairs at the time of publication. The reproduction of individual images, screenshots, embeds or video sequences serves to discuss the topic. 2) Individual contributions were created through the use of machine assistance and were carefully checked by the Mimikama editorial team before publication. ( Reason )