Caution! For a few days now, emails with Trojan attachments have been circulating that point to outstanding claims, with the sender address rechnung@Sofort.org !
These emails are the classic and dangerous emails that pretend to be a lawyer, payment portal or debt collection service and point out outstanding invoices or reminder amounts. They also include the recipient's correct salutation and the recipient's address details and phone number in the text, which makes them dangerously convincing.

However, these are fake emails that contain a Trojan horse in the attachment. Despite different sender details and different subject lines, all of these emails have a number of things in common, which ultimately makes it clear that they are fraudulent emails. The most important thing in common is the file attachment in the form of a .zip file. Even if the file attachment claims to be an invoice/reminder, you should not open it and under no circumstances execute the file contained therein.
Dear name...,
unfortunately your transfer to Sofort GbR could not be recorded.
We expect payment to our bank account by May 31, 2018. If no payment is recorded by the specified date, we will be forced to submit your claim to a court. You will bear all associated costs.
The detailed claim issue number 449724980, from which you can find all items, is attached.
Due to the existing late payment, you are also forced to bear the resulting costs of 5.86 euros. In order to avoid additional reminder costs, we ask you to transfer the amount due to our account. All bookings up to May 23, 2018 were taken into account.
If you have any questions or are unclear, we expect to be contacted within 24 hours.
With best regards
Sofort GbR
There is a file attachment in the email!
Do not under any circumstances open the file attachment!
In the cases that have been processed so far regarding these emails, it has always been shown that the attachments are Trojans. When analyzing the emails, Kaspersky Total Security a Trojan discovery:
What is a TROJAN?
Trojans are executable files that pretend to be something other than what they really are. When you run the file, it initially seems as if nothing is happening. But that's not true! A program is installed in the background.
The programs or internet fraudsters behind such programs now have access to your data or can also take complete control of your computer.
The most telltale of all file attachments is the .zip attachment. Emails from trustworthy sources never come as .zip files, not even as .com /.pif / .ico / .scr/ .exe
Please do not open and execute the contents unless you consciously expect such a file.
1) Anyone who opens or has opened the file attachment and has also executed the content (this is the critical point!) should first have their PC scanned by their virus scanner .
2) Change all passwords to social networks, online shops, etc. As a precaution, please also notify your bank or credit card company.
If you enjoyed this post and value the importance of well-founded information, become part of the exclusive Mimikama Club! Support our work and help us promote awareness and combat misinformation. As a club member you receive:
📬 Special Weekly Newsletter: Get exclusive content straight to your inbox.
🎥 Exclusive video* “Fact Checker Basic Course”: Learn from Andre Wolf how to recognize and combat misinformation.
📅 Early access to in-depth articles and fact checks: always be one step ahead.
📄 Bonus articles, just for you: Discover content you won't find anywhere else.
📝 Participation in webinars and workshops : Join us live or watch the recordings.
✔️ Quality exchange: Discuss safely in our comment function without trolls and bots.
Join us and become part of a community that stands for truth and clarity. Together we can make the world a little better!
* In this special course, Andre Wolf will teach you how to recognize and effectively combat misinformation. After completing the video, you have the opportunity to join our research team and actively participate in the education - an opportunity that is exclusively reserved for our club members!
Notes:
1) This content reflects the current state of affairs at the time of publication. The reproduction of individual images, screenshots, embeds or video sequences serves to discuss the topic. 2) Individual contributions were created through the use of machine assistance and were carefully checked by the Mimikama editorial team before publication. ( Reason )



