Towards the end of the year, people start preparing their income tax returns. How convenient that an email was distributed at exactly this time that apparently refers to this.

This email comes across as meaningless and unadorned. And yet many users carelessly open the attachment.

Screenshot: mimikama.org
Screenshot: mimikama.org

“Good morning,
I am sending you the declaration of 11/18 attached.

Best regards

Paul Geiss

PARTNER GMBH

You see us deeply impressed. “Partner GmbH”, yes, that says something! And then in the appendix we also find an invoice (for what actually?), which was compressed using the “Rar” packing program.

But maybe we are just forgetful? Maybe this is an important bill? After all, we don't want to get into trouble, so let's take a look and see what's in the appendix!

Fortunately, we are immediately warned:

Screenshot: mimikama.org
Screenshot: mimikama.org

Thanks to Kaspersky, we now know what is hidden in the Rar file:
a VBS file that contains evil!
VBS stands for “Visual Basic Script”, a scripting language developed by Microsoft. Nothing happens just by opening the Rar file. But if you now click on the VBS file contained in it to see the supposed invoice, a series of commands are executed.

As can be seen from Kaspersky , it is a “Trojan downloader”. This means that by executing the file, additional programs, Trojans , are downloaded onto the PC. Since you started the program yourself, the PC will not give a security warning if you don't have any protection software installed!

Conclusion

You should never trust unsolicited emails with invoices anyway. But if you have a curious nature, it is always better to have a protection program installed that protects you from unwanted Trojans on your PC.


If you enjoyed this post and value the importance of well-founded information, become part of the exclusive Mimikama Club! Support our work and help us promote awareness and combat misinformation. As a club member you receive:

📬 Special Weekly Newsletter: Get exclusive content straight to your inbox.
🎥 Exclusive video* “Fact Checker Basic Course”: Learn from Andre Wolf how to recognize and combat misinformation.
📅 Early access to in-depth articles and fact checks: always be one step ahead.
📄 Bonus articles, just for you: Discover content you won't find anywhere else.
📝 Participation in webinars and workshops : Join us live or watch the recordings.
✔️ Quality exchange: Discuss safely in our comment function without trolls and bots.

Join us and become part of a community that stands for truth and clarity. Together we can make the world a little better!

* In this special course, Andre Wolf will teach you how to recognize and effectively combat misinformation. After completing the video, you have the opportunity to join our research team and actively participate in the education - an opportunity that is exclusively reserved for our club members!


Notes:
1) This content reflects the current state of affairs at the time of publication. The reproduction of individual images, screenshots, embeds or video sequences serves to discuss the topic. 2) Individual contributions were created through the use of machine assistance and were carefully checked by the Mimikama editorial team before publication. ( Reason )