Online Threat Alerts (OTA) - Alerting you to scams and frauds.
Online users who have received unexpected email messages with attached files with names ending with .ace are asked not to open them. This is because the attachments are compressed malicious files that contain malware. And, any attempt to open the malicious attachments will result in the recipients getting their computers infected with a virus, Trojan horse, spyware, ransomware or other malware.
Subject: 00_Invoice_7267Date: Wed 17/05/2017 11:27From: OMANRAJIDAttachment: 00_Invoice_7267.ace (108 KB)
The .ACE compression is similar to ZIP or RAR which is the most popular file compression or archive formats.
Cyber criminals usually store their malware in compressed files to help prevent antivirus software from detecting them. In other words, they do it because the compressed malicious email attachments may bypass the recipients' antivirus software.
Files that contain the .ace file extension are archive files that have been compressed using the WinAce file archiving utility. Computer users utilize a file archiving program when they want to combine a large batch of files into a single archive folder. WinAce is a program that can do this, utilizing a proprietary compression algorithm. This proprietary algorithm offers faster compression speeds and a higher compression ratio than many of the other archiving applications on the market. This allows the user to create smaller file archives, saving space on the user's hard drive.
The .ace file extension is also used by the Aces200 software program. This program uses the .ace file extension for the image files it saves.
Check the comment section below for answers or additional information. Share what you know, or ask a question about this article by leaving a comment below.
Online Threat Alerts (OTA) is not affiliated with or endorsed by any trademark owner mentioned in this article. Some of the information in samples in this article may have been impersonated or spoofed.
8
I wish to report another email sending out malware from email Solaya.cicadex-mail.com
Here is another malicious email:"Subject: RE: INVOICE ??Accounts [zohaib.ahmed-greensyspk.com]undisclosed-recipients:attachment: copy-4855975.ace [163KB]PLEASE INVOICEAttached is the details as requested.Thanks,"
RECEIVED FRAUDULENT EMAILS DO NOT OPEN OR REPORT TO THE FTC ONLINE."1.Angela via gmail.com c7dw6-c7dw6.co.uksharonelaines-gmail.comSat, Feb 3, 2018 at 10:05 PMYour Future finally unveiled!gmail.comStandard encryption (TLS) Learn more2.DHL BILL OF LADING SHIPPING INVOICE DOCUMENTSDHL GLOBAL FORWARDING® Yesterday, 8:13 PMshop-svarmat.ru; info-weldcom.ru; weldaui-rambler.ru; sale-deltasvar.ru; info-calen.su;nehim-mail.ru; info-svarka74.ru; svarka-svarka.su;DHL BILL OF LADING DOWNLOAD ATTACHMENT HERE"
Here is another scam:"From: "Olivia Heandra Nata" Subject: Request For Quotation For Pacific O & G ProjectDate: 2 October 2017 at 06:27:12 CESTAttachments: RFQ NO. PC01001ENQ-2017P10.ace (103 KB), Pacific standard terms and conditions(STC).ace (103 KB)Dear Sales,RFQ NO. PC01001/ENQ-2017/P/10Please refer to the attached RFQ and we request you to send us the quotation with Catalog for the (PACIFIC OIL & GAS) as per attached reference documents.We look forward to receive your offer on or before 10th of Oct. 2017.For any query, kindly call or write us.Please acknowledge the receipt of this email within two working days.Thanks & best Regards,"
Here is another malicious email message:-- original message --"Subject: REQUEST FOR QUOTE IMG06062017 00011Wed 07/06/2017 21:48From: Verde Trading LLCAttachment: IMG_SCAN0806201700001_PDF.ace 318 KBAttachment: Company Profile.ace 218 KBURGENT INQUIRYDear SirPlease quote your competitive price for the attached mentioned materials:-DescriptionUnitQTYPriceAmount 1IMG06062017_QUOTE_00011,PDF 2”x6”&widerx8ft,11ft,12ftCFT 300 Thanks and warm regards."
Here is another malicious email:"Pending Order under SAI 2/RM/437/12/2016-2017Mon 05/06/2017 20:26From: Elisco Lightning DTBAttachments: b3e55c1c.jpeg, ffffeaba.png, DTB_Order.PDF.aceDear sir,Good morning,Please kindly note attached is our Intended orders, Please check to see our specification.they are two separate orders but we want them coming together in one shipment.Also, check if it will be possible to ship before mid-year.Kindly note Item 3&5 and confirm the price as I cannot determine it from your catalogue.We want 40"ft container each. And i will appreciate if this container is well packed to avoid damages.I await your reply now in response of this order.Looking forward to your reply.Aniey Purchase Department20/F., One Kowloon, 1 Wang Yuen Street,"
Here is another malicious email:"Shipping Document / Invoice and copy of DHL receipt.Mon 05/06/2017 20:27From: DHL ExpressAttachment: DHL AWB Receipt Telex.Pdf.aceYour parcel (shipping document) will arrive at the post office on 6rd JUNE, Here is your Shipping Document / Invoice and copy of DHL receipt for your tracking. Please kindly check the attached (Check Your Package) to confirm accordingly if your address is correct before we submit to our office outlet for dispatch to your destination."
Here is another malicious email:"Re: TT copy 05.06.2017Mon 05/06/2017 20:28Attachments: b3e55c1c.jpeg, 6db3c2e8.png, Scan_PDF.aceSubject: GTK-IMPORT-ORDER71A8210, with the picture from logo:Good day, Attached is May. TT balance payment for your reference.Please note that some of Qty was adjusted to round up last parking Kindly confirm and let me know if there is any amendment needed to do concerning the order. awaiting for your reply Thanks,ElenaAccounts Department20/F., One Kowloon, 1 Wang Yuen Street,Kowloon Bay, Hong KongTel: (852) 2877-8933Fax: (852) 2877-1322"