Malicious Emails "See Attachment Invoice," "May 2017 Invoice" or "Payment Invoice"

Online Threat Alerts (OTA) - Alerting you to scams and frauds.

Malicious Emails "See Attachment Invoice," "May 2017 Invoice" or "Payment Invoice"

Online users, if you have received email messages with an attachment with a name ending with ".exe", with the following subject or message: "see attachment invoice," "Payment Invoice," "May 2017 Invoice" or other variations, please do not open the attachment. The attachment is malware that will infect the computers of the recipients who open it. Once the recipients' computers are infected, the malware will allow the cyber criminals responsible for it to take control of the infected computers remotely.

Once in control, the cyber criminals can steal the infected computer owners' account credentials, personal and financial information. They may also use the computers to commit cyber crimes that will be traced back to the owners of the infected computers who have no knowledge of what is happening.

The name of the malicious attachment is: "Invoice_244.exe". The name may change. Therefore, online users should never open email attachments with names ending with "*.exe."

Remember, be careful when clicking on links in emails, even if you appear to know the sender. Exercise caution when opening email attachments. Be particularly wary of Microsoft Word documents, PDFs, Compressed or ZIP file attachments.