Attention: This Trojan disguises itself as “Directpay24”

There he is again! An old familiar email with a Trojan as a “gift”. We've already seen it in various forms, but now it's supposedly coming from Directpay24 GmbH, or at least that's how it should look.

Important note: The company mentioned has nothing to do with the scam. You yourself have become a victim here, with your name being misused to lure users into a trap!

It's about this email:

Literally:

Dear xxxxxxxxxx,
to our regret we discovered that our request NR705357017 has not received any response from you to date.
Now we are offering you the last chance to pay the outstanding amount from Directpay24 GmbH. Due to the existing payment arrears, you are also forced to pay the costs of 68.91 euros incurred as a result of our work.
If you have any questions or are unclear, we expect to be contacted within two working days. In order to avoid additional reminder costs, we ask you to transfer the amount due to our account. All payments made up to January 6, 2017 were taken into account. Contract data:
xxxxxxxxxx
xxxxxxxxxx xx
xxxxx xxxxx
Tel. xxxxxxxxxx

We expect payment to be made to our checking account by January 18, 2017 at the latest.
If we are unable to view the transfer by the specified date, we will be forced to submit your reminder notice to a court. All associated costs are at your own expense. The complete claim issue NR705357017, from which you can find all positions, is attached.

Kind regards
, Clerk Jason Keppler

This email is intended only for the recipient to whom it is addressed and may contain confidential or professional secrecy material.

WARNING! We had the file attachment checked and discovered a TROJAN in it!

Since we at Mimikama are very curious, we open the attached file, and as expected: it is blocked directly by Kaspersky Total Security .

The file contains a Trojan !

What is a TROJAN?

Trojans are standalone programs (.exe) that pretend to be something other than what they really are. When you run the file, it seems like nothing is happening.

But that's not true! A program is installed in the background.

The programs or internet fraudsters behind such programs now have access to your data or can also have complete control over your computer.

The most telltale of all file attachments is the .zip attachment. Emails from trustworthy sources never come as .zip files, not even as .com /.pif / .ico / .scr/ .exe. Please do not open and execute the contents unless you consciously expect such a file.

1) Anyone who opens or has opened the file attachment and has also executed the content (this is the critical point!) should first have their PC scanned by their virus scanner .
2) Change all passwords to social networks, online shops, etc. As a precaution, please also notify your bank or credit card company.