Online Threat Alerts (OTA) - Alerting you to scams and frauds.
Metro Bank customers who have used received emails like the below, which claim their monthly statement is ready, should delete them. This is because the fake emails are malicious and are being sent by cybercriminals. The fake email message has an attached HTML (Estatement.htm) that will download a malicious Microsoft Word document that will infect the recipients' computers if they attempt to open it.
From: "Metro Bank Online" <metro.online.statements@bt.com>To: "Recipients" <metro.online.statements@bt.com>Sent: Thursday, November 9, 2017 4:24:46 AMSubject: Your Monthly e-statement is readyAttachment: Estatement.htmYour recent statements is ready for your view.View the 'Edocument' section enclosed to review your records.Metro Bank PLC is an independent UK Bank - it is not affiliated with any other bank or organisation (including the METRO newspaper or its publishers) anywhere in the world. "Metrobank" is the registered trademark of Metro Bank PLC.
From: "Metro Bank Online" <metro.online.statements@bt.com>
To: "Recipients" <metro.online.statements@bt.com>
Sent: Thursday, November 9, 2017 4:24:46 AM
Subject: Your Monthly e-statement is ready
Attachment: Estatement.htm
Your recent statements is ready for your view.
View the 'Edocument' section enclosed to review your records.
Metro Bank PLC is an independent UK Bank - it is not affiliated with any other bank or organisation (including the METRO newspaper or its publishers) anywhere in the world. "Metrobank" is the registered trademark of Metro Bank PLC.
Remember, your bank and other legitimate organizations will never send an attach HTML document or file, a document with a name ending with ".html" or ".htm", and ask you to open it. Therefore, if you have received the same emails, please delete them and do not attempt to open the attachment.
Recipients of the fake and malicious email who have attempted to open the attachment are asked to scan their computers for viruses with the antivirus software that they have installed on them.
Check the comment section below for answers or additional information. Share what you know, or ask a question about this article by leaving a comment below.
Online Threat Alerts (OTA) is not affiliated with or endorsed by any trademark owner mentioned in this article. Some of the information in samples in this article may have been impersonated or spoofed.
1
Received via email:"Hello, I received this scam e-mail yesterday but have accidentally opened it on another computer, and am no unable to use that computer. Are you able to advise me what to do please?Thank youJohn and Julie.-------- Forwarded Message --------Subject: Your Monthly e-statement is readyDate: Thu, 09 Nov 2017 11:25:26 0000From: Metro Bank Online To: Recipients Your recent statements is ready for your view.View the 'Edocument' section enclosed to review your records.Metro Bank PLC is an independent UK Bank - it is not affiliated with any other bank or organisation (including the METRO newspaper or its publishers) anywhere in the world. "Metrobank" is the registered trademark of Metro Bank PLC."