The email messages below: "AERO, Notice to appear in Court," are fakes and contain a malicious attachment disguised as a court notice that the recipients of the email messages are asked to open. Attempts to open the malicious attachment will result in the recipients' computers getting infected with a virus, spyware, Trojan horse or other malware. So, the recipients of the same email messages are advised not to attempt to open the attachment. They should just delete the email messages instead.
The Fake Email Messages with Viruses
From: County Court [lester.hicks@whw0095.w hservidor.com]
Date: 24 March 2015 at 16:45
Subject: AERO, Notice to Appear
Attachment: Court_Notification_0000310657.zip
This is to inform you to appear in the Court on the March 31 for your case hearing. Please, prepare all the documents relating to the case and bring them to Court on the specified date.
Note: The case may be heard by the judge in your absence if you do not come.
You can review complete details of the Court Notice in the attachment.
Yours faithfully,
Lester Hicks,
Court Secretary.
From: District Court [cody.bowman@p3nw8sh177 .shr.prod.phx3.secureserver.net]
Date: 24 March 2015 at 16:44
Subject: AERO, Notice to appear in Court #0000310657
Attachment: Notice_to_Appear_000283436.zip
Dear Aero,
This is to inform you to appear in the Court on the March 28 for your case hearing. You are kindly asked to prepare and bring the documents relating to the case to Court on the specified date.
Note: If you do not come, the case will be heard in your absence.
You can review complete details of the Court Notice in the attachment.
Sincerely,
Cody Bowman,
District Clerk.
The email messages contain the following dangerous files:
- Court_Notification_0000310657.doc.js
- Notice_to_Appear_000283436.doc.js
Note: the file name may change
The attachments are files that contain the JavaScript programming code that will attempt to download malicious files from the following websites that infect the recipients’ computers with Trojan horse, virus, spyware or other malware, if the recipients attempt to open them:
- pitfaa.nidhog.com
- ilarf.net
- gurutravel.co.nz
- lawyermyowin.com
- www.lead.com.co
If the recipients' computers have become infected with a malicious Trojan horse, the cybercriminals behind the email messages will be able to access and take control of their computers remotely from anywhere around the world. They may spy on them, use their computers to commit cybercrimes, or steal their personal and financial information.
Now, recipients of the email messages who have already opened the malicious attachment, are advised to do a full scan of their computers with their antivirus software. The name of the attachment may change, so be careful when opening email attachments
If you don’t have antivirus software installed on your computer, please click here for a list of free antivirus software.
For a list of other virus email messages, please click here.