Metro Bank customers who have used received emails like the below, which claim their monthly statement is ready, should delete them. This is because the fake emails are malicious and are being sent by cybercriminals. The fake email message has an attached HTML (Estatement.htm) that will download a malicious Microsoft Word document that will infect the recipients' computers if they attempt to open it.
A Sample of a "Metro Bank Monthly E-statement is Ready" Malicious Email
From: "Metro Bank Online" <metro.online.statements@bt.com>
To: "Recipients" <metro.online.statements@bt.com>
Sent: Thursday, November 9, 2017 4:24:46 AM
Subject: Your Monthly e-statement is ready
Attachment: Estatement.htm
Your recent statements is ready for your view.
View the 'Edocument' section enclosed to review your records.
Metro Bank PLC is an independent UK Bank - it is not affiliated with any other bank or organisation (including the METRO newspaper or its publishers) anywhere in the world. "Metrobank" is the registered trademark of Metro Bank PLC.
Remember, your bank and other legitimate organizations will never send an attach HTML document or file, a document with a name ending with ".html" or ".htm", and ask you to open it. Therefore, if you have received the same emails, please delete them and do not attempt to open the attachment.
Recipients of the fake and malicious email who have attempted to open the attachment are asked to scan their computers for viruses with the antivirus software that they have installed on them.