Alerts left arrow right arrow   

Virus Email Demanding Ransom - "Account #650280883139 Temporarily Locked"

Comments  +
Virus Email Demanding Ransom - "Account #650280883139 Temporarily Locked"

The fake email messages below, which claim that the recipient's account has been temporarily locked, are fakes and have a malicious zip or compressed file attached. The attached file contains the FileCryptor / CTB-Locker / Citroni ransomware, which will lock the victim’s computer screen and encrypt all the files on the victim's computer, making them inaccessible. It will then demand a ransom for the files to be decrypted or made accessible again by displaying the following message: "Your personal files are encrypted by CTB-Locker".

The ransom is required to be paid using Bitcoins, which is a form of digital currency, created and held electronically.

The recipients of the malicious emails are asked to delete them, and do not attempt to open the malicious attachment. Cyber-criminals are sending out fake emails with malicious attachments ending with ".zip", ".rar", ".cab", “.exe” and ".scr". These attachments should never be open, unless the recipient is expecting the file.

The Malicious Email Messages

  • Subject: [Issue 701392E97155285] Account #650280883139 Temporarily Locked
    Attachment: 650280883139.zip

    Dear user,

    We detect unauthorized Login Attempts to your ID #650280883139 from other IP Address. Please re-confirm your identity. See attached docs for full information.

    Thad Finks

    AZAHAR CASTELLON

    Parque Oeste 20, Bajo 12006 Castellón

    Castellón
    SPAIN

    +34 964 01 85 11

  • Subject: [Issue 79672F43F4021310] Account #632996648837 Temporarily Locked

    Attachment: 632996648837.zip

    Dear user,

    We detect unauthorized Login Attempts to your ID #632996648837 from other IP Address.
    Please re-confirm your identity. See attached docs for full information.

    --------

    Novella Soulier
    Avenue Lock & Safe
    738 Bank Street, Ottawa, ON K1S 3V4
    CANADA
    613-289-5161

  • Subject: [Issue 2548A80759041653] Account #514956694710 Temporarily Locked

    Attachment: 514956694710.zip

    Dear user,

    We detect unauthorized Login Attempts to your ID #514956694710 from other IP Address. Please re-confirm your identity. See attached docs for full information.

    Juliet Tavana
    SARL MEUBLES LUXOVIENS
    56 Rue Jules Jeanneney 70300 Luxeuil Les Bains
    Bains
    FRANCE
    +33 384 65 95 02

  • Subject: [Issue 600663A34F6E2930] Account #394822403123 Temporarily Locked
    Attachment: 394822403123.zip

    Dear user,

    We detect unauthorized Login Attempts to your ID #394822403123 from other IP Address. Please re-confirm your identity. See attached docs for full information.

    --------

    Hallie Kippley
    Ardrossan Jr-Sr High School
    Ardrossan, AB T8E 1J3
    CANADA
    780-997-4028

Please share with us what you know or ask a question about this article by leaving a comment below. Also, check the comment section below for additional information, if there is any.

Remember to forward malicious or phishing email messages to us at the following email address: info@onlinethreatalerts.com

Comments, Questions and Reviews

Comment(Total: 0)

Write a Comment, Review, or ask a Question or scroll down to view comments, reviews and questions made by others.

Would you recommend this article to a friend or family member?
Yes (0) No (0)   

Submit Comment Write Your Comment, Question or Review

Write your comment, question or review in the box below to share what you know or to get answers. Please revisit after an hour or more to view reponses or answers to you questions.
All comments, questions or reviews will be examined for derogatory or indecent statements, spam or malicous code, before they are posted on this website.


More for you:
Warning! JavaScript is turned off or disabled! Some features on this website will not work.