Fake and Virus Email - "Recent Transaction No - R7DMWYY. Cancelled"

  • Save
  • Comments: 1
  • Views: 1,415
  • Updated: July 6, 2015 2015-07-06T10:02:33
  • Date: July 6, 2015
 +
Fake and Virus Email - Recent Transaction No - R7DMWYY. Cancelled

Would you share this Article with others?

  • Yes (0)
  •       
  • No (0)   

The email message below: "Recent Transaction No: R7DMWYY. Cancelled," which claims that the recipients should open the attachment to view details of a cancelled international wire transfer, is a fake and is malicious. The email was sent by cyber-criminals with a malicious Microsoft Word document attached that contains a Macro virus, which will only work or activate if the recipients enable Macro or "Content". If Macro or "Content" is enabled, this will activate the Macro virus, which will download a Trojan horse from a malicious or compromised website that will infect the victims' computers.

Once infected, the Trojan horse will allow cyber-criminals to remotely gain access to the victims' computers from anywhere around the world without their knowledge. This will allow the cyber-criminals to spy on them, steal their user names, passwords, personal and financial information, which will be used to steal their money or identity. So, please do not follow the instructions in the email message if you have received it, delete it instead.

The victims of the fake email message are advised to do a full scan of their computers with the anti-virus software installed on them.

The Fake and Malicious Email Message.

Subject: Recent Transaction No: R7DMWYY. Cancelled
From: poppy@stagweb.co.uk
Sent: Mon 7/06/15 5:57 AM
Attachment: R7DMWYY.doc

Message for account holder: [email address removed]

International Wire transfer id: R7DMWYY

Transfer status: Cancelled

Date: 5:43 Monday, July 6, 2015

Please check the word document provided with this email to have more details about this transfer.

Note: Some of the names, addresses, email addresses, telephone numbers or other information in samples on this website may have been impersonated or spoofed.

Please share what you know or ask a question about this article by leaving a comment below. Check the comment section below for additional information, if there is any. Remember to forward suspicious, malicious, or phishing email messages to us at the following email address: info@onlinethreatalerts.com. And, report missing persons, scams, untrustworthy, or fraudulent websites to us. Tell us why you consider the websites untrustworthy or fraudulent. Also, to quickly find answers to your questions, use our search engine.

You can help maintain Online Threat Alerts (OTA) by paying a service fee. Click here to make payment.

Comments, Questions, Answers, or Reviews
(Total: 1)

To help protect your privacy, please do not post or remove, your full name, telephone number, email address, username, password, account number, credit card information, home address or other sensitive information in or from your comments, questions, or reviews. Also, remember to keep comments, reviews, answers respectful.

The comments, reviews or answers below do not necessarily reflect the views of Online Threat Alerts (OTA).

  • July 9, 2015 at 1:13 PM by an anonymous user from: Sydney, New South Wales, Australia

    I got a similar message yesterday:

    - - -

    "Status status message for [email address removed]

    International Transfer transfer: 4WT7RHZW1

    Total: 2503.25 AUD

    Status: Cancelled

    Please click the document provided with this email to see more details about this issue."

 Show More Comments (1)
Write Your Comment, Question, Answer, or Review

Write your comment, question, answer, or review in the box below to share what you know or to get answers. NB: We will use your IP address to display your approximate location to other users.

Your comment, question, answer, or review will be posted as an anonymous user because you are not signed in. Anonymous posts cannot be edited or deleted. Sign-in.

Online Threat Alerts (OTA)

Fake and Virus Email - "Recent Transaction No - R7DMWYY. Cancelled"