Fake Australian Taxation Office and Virus Email - "Remittance Advisory Email"
The email message below with the subject: "Remittance Advisory Email," contains a link that will download a dangerous file with the name "FAX_82APL932UN_772.zip" onto your computer. The dangerous file contains a malicious file called "FAX_82APL932UN_772.scr" that will infect your computer with a virus or Trojan horse if you open it.
Note: The email message was created and sent by cyber-criminals, NOT by the Australian Taxation Office (ATO), to trick the recipients into clicking on the link within it.
The Fake and Virus Email Message
FFrom: Australian Taxation Office [noreply@ato .gov.au]
Date: 22 May 2015 at 10:31
Subject: Remittance Advisory EmailMonday 22 May 2014
This is a Remitter Advice following the submission of a payment instruction by Lloyds Bank Plc.
Please review the details of the payment here.
Lloyds Banking Group plc. Registered Office: The Mound, Edinburgh EH1 1YZ. Registered in Scotland no. SC95000. Telephone: 0131 225 4555. Lloyds Bank plc. Registered Office: 25 Gresham Street, London EC2V 7HN. Registered in England and Wales no. 2065. Telephone 0207626 1500. Bank of Scotland plc. Registered Office: The Mound, Edinburgh EH1 1YZ. Registered in Scotland no. SC327000. Telephone: 08457 21 31 41. Cheltenham & Gloucester plc. Registered Office: Barnett Way, Gloucester GL4 3RL. Registered in England and Wales 2299428. Telephone: 0845 603 1637
Lloyds Bank plc, Bank of Scotland plc are authorised by the Prudential Regulation Authority and regulated by the Financial Conduct Authority and Prudential Regulation Authority.
Cheltenham & Gloucester plc is authorised and regulated by the Financial Conduct Authority.
Halifax is a division of Bank of Scotland plc. Cheltenham & Gloucester Savings is a division of Lloyds Bank plc.
HBOS plc. Registered Office: The Mound, Edinburgh EH1 1YZ. Registered in Scotland no. SC218813.
The cybercriminals behind the malicious email message aim is to trick the curious recipients into downloading and opening the dangerous file, which will infect their computers with a virus or Trojan horse.
Once your computer has become infected with this malicious Trojan horse, the cybercriminals behind this email message will be able to access and take control of your computer remotely from anywhere around the world. They may spy on you, use your computer to commit cyber-crimes, or steal your personal and financial information.
Now, if you have already clicked on the link, downloaded and open the malicious file, please do a full scan of your computer with the antivirus software installed on it. The name of the attachment may change, so be careful when opening email attachments.
If you don’t have antivirus software installed on your computer, please click here for a list of free antivirus software.
Click here for a list of email attachments you should never open, regardless of where they came from.
For a list of other virus email messages, please click here.
Check the comment section for additional information, or share what you know or ask a question about this article, by clicking the 'View or Write Comment' button below.
Note: Some of the information in samples on this website may have been impersonated or spoofed.