Online Threat Alerts (OTA) - Alerting you to scams and frauds.
Virus - Malware - Spyware
The fake email messages below, which claim that the recipient's account has been temporarily locked, are fakes and have a malicious zip or compressed file attached. The attached file contains the FileCryptor / CTB-Locker / Citroni ransomware, which will lock the victim’s computer screen and encrypt all the files on the victim's computer, making them inaccessible. It will then demand a ransom for the files to be decrypted or made accessible again by displaying the following message: "Your personal files are encrypted by CTB-Locker".
The ransom is required to be paid using Bitcoins, which is a form of digital currency, created and held electronically.
The recipients of the malicious emails are asked to delete them, and do not attempt to open the malicious attachment. Cyber-criminals are sending out fake emails with malicious attachments ending with ".zip", ".rar", ".cab", “.exe” and ".scr". These attachments should never be open, unless the recipient is expecting the file.
Subject: [Issue 701392E97155285] Account #650280883139 Temporarily LockedAttachment: 650280883139.zipDear user,We detect unauthorized Login Attempts to your ID #650280883139 from other IP Address. Please re-confirm your identity. See attached docs for full information.Thad FinksAZAHAR CASTELLONParque Oeste 20, Bajo 12006 CastellónCastellónSPAIN+34 964 01 85 11
Subject: [Issue 701392E97155285] Account #650280883139 Temporarily LockedAttachment: 650280883139.zip
Dear user,
We detect unauthorized Login Attempts to your ID #650280883139 from other IP Address. Please re-confirm your identity. See attached docs for full information.
Thad Finks
AZAHAR CASTELLON
Parque Oeste 20, Bajo 12006 Castellón
CastellónSPAIN
+34 964 01 85 11
Subject: [Issue 79672F43F4021310] Account #632996648837 Temporarily LockedAttachment: 632996648837.zipDear user,We detect unauthorized Login Attempts to your ID #632996648837 from other IP Address.Please re-confirm your identity. See attached docs for full information.--------Novella SoulierAvenue Lock & Safe738 Bank Street, Ottawa, ON K1S 3V4CANADA613-289-5161
Subject: [Issue 79672F43F4021310] Account #632996648837 Temporarily Locked
Attachment: 632996648837.zip
We detect unauthorized Login Attempts to your ID #632996648837 from other IP Address.Please re-confirm your identity. See attached docs for full information.
--------
Novella SoulierAvenue Lock & Safe738 Bank Street, Ottawa, ON K1S 3V4CANADA613-289-5161
Subject: [Issue 2548A80759041653] Account #514956694710 Temporarily LockedAttachment: 514956694710.zipDear user,We detect unauthorized Login Attempts to your ID #514956694710 from other IP Address. Please re-confirm your identity. See attached docs for full information.Juliet TavanaSARL MEUBLES LUXOVIENS56 Rue Jules Jeanneney 70300 Luxeuil Les BainsBainsFRANCE+33 384 65 95 02
Subject: [Issue 2548A80759041653] Account #514956694710 Temporarily Locked
Attachment: 514956694710.zip
We detect unauthorized Login Attempts to your ID #514956694710 from other IP Address. Please re-confirm your identity. See attached docs for full information.
Juliet TavanaSARL MEUBLES LUXOVIENS56 Rue Jules Jeanneney 70300 Luxeuil Les BainsBainsFRANCE+33 384 65 95 02
Subject: [Issue 600663A34F6E2930] Account #394822403123 Temporarily LockedAttachment: 394822403123.zipDear user,We detect unauthorized Login Attempts to your ID #394822403123 from other IP Address. Please re-confirm your identity. See attached docs for full information.--------Hallie KippleyArdrossan Jr-Sr High SchoolArdrossan, AB T8E 1J3CANADA780-997-4028
Subject: [Issue 600663A34F6E2930] Account #394822403123 Temporarily LockedAttachment: 394822403123.zip
We detect unauthorized Login Attempts to your ID #394822403123 from other IP Address. Please re-confirm your identity. See attached docs for full information.
Hallie KippleyArdrossan Jr-Sr High SchoolArdrossan, AB T8E 1J3CANADA780-997-4028
