7-Zip Archive (.7z) Malicious Email Attachments Home Categories Malware 7-Zip Archive (.7z) Malicious Email Attachments 9 9 1.82K 2 8y ago 2017-08-30T22:11:15-05:00 6y ago 2020-02-12T07:05:30-05:00 Online Threat Alerts Online users who have received unexpected email messages with attached files with names ending with ".7z" are asked not to open them. This is because the fake email messages are being sent by cyber criminals and the attachments are 7-Zip compressed archived files that contain malware, malicious programs or computer viruses. And, any attempt to open the malicious attachments will result in the recipients getting their computers infected with a virus, Trojan horse, spyware, ransomware or other malware. A Sample of a Malicious 7-Zip Archive (.7z) Email MessageSubject: Emailed Invoice - 107681:1Date: Wed 30/08/2017 22:04From: Nickolas LeonardAttachment: I_107681-1.7z (3 KB)As requestedregards--Nickolas LeonardThe 7-Zip compression is similar to ZIP which is the most popular file compression or archive formats.Cyber criminals usually store their malware in compressed files to help prevent antivirus software from detecting them. In other words, they do it because the compressed malicious email attachments may bypass the recipients' antivirus software.What is a 7-Zip file?Files with the extension .7z are compressed archive files created with 7-Zip open source software. These files are created using a compression method called LZMA, which is an algorithm for lossless data compression—a type of compression known for reducing file size while preserving quality. Check the comment section below for answers or additional information. Share what you know, or ask a question about this article by leaving a comment below. Online Threat Alerts is not affiliated with or endorsed by any trademark owner mentioned in this article. Some of the information in samples in this article may have been impersonated or spoofed. Save + Was this article helpful? (2) (0) More For You Is Jzztxudfsl Shop a Scam? See Store Reviews 1-520-100-1005 Fraud and Scam Calls Is sicfvbwu.myshopify.com an Untrustworthy Online Store? Is moretimeshow.com a Trustworthy Online Store? Is nxxyss.com an Untrustworthy Online Store? Cakayak - it is a Fraudulent Online Store Vapmoney Club is a Fraudulent Work-From-Home Website 'www.domainregistryasia.net' - it is a Fake CN and ASIA Domain Name Registration Website docmoney.club - it is a Fraudulent Work-From-Home Website gepmoney.club - it is a Fraudulent Work-From-Home Website the 'David Video' Malicious Facebook Message 'The Government of Benin Republic' Scams 'Office 365 Account De-activation Update' Malicious Emails Hurricane Harvey Texas Flood Victims Charity or Donation Scams Comments / Answers Remove sensitive information from your post. Your IP address will be used to display your estimated location. Enter comment post here 9infohttps://www.onlinethreatalerts.com/users/#infoFeb 12, 2020 by 7-Zip Archive (.7z) Malicious Email Attachmentsinfo"Notice to appear in CourtCOURT ORDERWed 2/12/2020 7:48 AMFrom: Angela Marone - angelamarone-icj.com Document_Court_Order.7z (15 KB)--- Notice to appear in Court #0368759073 ---You are requested to appear in court on Friday the 14th of Febraury 2020 at 10:00 AM.Please, do not forget to bring all the documents related to this case. Herein attached are the Court Order and other documents pertaining to this case; including the court address and contact information.FILE ID is: CASE#0368759073Note: The case will be heard by the judge in your absence (if you do not attend) and the Court may issue an arrest warrant for your arrest. If a warrant is issued for your arrest, you may be held in custody until your brought before the Court .Yours faithfully,Angela Malone.Clerk of Court."Another malicious email.an anonymous userhttps://www.onlinethreatalerts.com/users/#an-anonymous-userDec 27, 2017 by 7-Zip Archive (.7z) Malicious Email Attachmentsan anonymous user from: Quezon City, National Capital Region, PhilippinesHi! Just received one attachment via facebook messenger with a file as video_8095.mp4.7z as an attachment. The messenger app cannot view it but is seen from the browser. Is this also the same malware infected program? I am hesitant to open it.an anonymous userhttps://www.onlinethreatalerts.com/users/#an-anonymous-userDec 28, 2017 by 7-Zip Archive (.7z) Malicious Email Attachmentsan anonymous user from: San Juan, National Capital Region, PhilippinesGot also one today. Did't open it.an anonymous userhttps://www.onlinethreatalerts.com/users/#an-anonymous-userDec 28, 2017 by 7-Zip Archive (.7z) Malicious Email Attachmentsan anonymous user from: Tacloban City, Eastern Visayas, Philippinesdont open it! mobile phone messenger cant open it since its not intended to ran on mobile phones, and just what the article said it will infect your pc.. so it is intended to harm your computer..an anonymous userhttps://www.onlinethreatalerts.com/users/#an-anonymous-userDec 26, 2017 by 7-Zip Archive (.7z) Malicious Email Attachmentsan anonymous user from: Lecanto, Florida, United States12/26/2017Received similar .7z attachment emailSender (Terrell-mail316.us3.mcdlv.net)Attachment: CCE26122017_006144.7ZAttachment naming scheme seems to be letters (CCE) followed by today's date (26122017) = 26-12-2017.infohttps://www.onlinethreatalerts.com/users/#infoDec 20, 2017 by 7-Zip Archive (.7z) Malicious Email AttachmentsinfoHere is another scam:"Voicemail from 01770405763 <01770405763> 2m 22sMessage From "01770405763" 01770405763Created: Thu, 21 Dec 2017 07:54:00 0700Duration: 2m 22sAttachment: msg_21_12_01770405763-8442763.7z 2 KB"infohttps://www.onlinethreatalerts.com/users/#infoSep 29, 2017 by 7-Zip Archive (.7z) Malicious Email AttachmentsinfoHere is another scam:"InvoiceFri 29/09/2017 11:30From: "Roberto Kilner"Attachment: 869572.7zHi,Invoice attached for the Office365 account.RegardsRoberto Kilner"infohttps://www.onlinethreatalerts.com/users/#infoSep 27, 2017 by 7-Zip Archive (.7z) Malicious Email AttachmentsinfoHere is another scam:"Subject: Invoice PIS3021721Date: Tue 26/09/2017 23:25From: AutoPosted PI NotifierAttachment: InvoicePIS3021721.7zPlease find Invoice PIS3021721 attached."infohttps://www.onlinethreatalerts.com/users/#infoSep 3, 2017 by 7-Zip Archive (.7z) Malicious Email AttachmentsinfoReceived the following question via a Facebook message:"Is the app 7 Zip itself malware?"Answer:No, 7-Zip is not a malware. It is a legitimate and free file compression format used to reduce the size of files.But, cyber criminals are using it to store their malware in, to help prevent antivirus software from detecting them.
infohttps://www.onlinethreatalerts.com/users/#infoFeb 12, 2020 by 7-Zip Archive (.7z) Malicious Email Attachmentsinfo"Notice to appear in CourtCOURT ORDERWed 2/12/2020 7:48 AMFrom: Angela Marone - angelamarone-icj.com Document_Court_Order.7z (15 KB)--- Notice to appear in Court #0368759073 ---You are requested to appear in court on Friday the 14th of Febraury 2020 at 10:00 AM.Please, do not forget to bring all the documents related to this case. Herein attached are the Court Order and other documents pertaining to this case; including the court address and contact information.FILE ID is: CASE#0368759073Note: The case will be heard by the judge in your absence (if you do not attend) and the Court may issue an arrest warrant for your arrest. If a warrant is issued for your arrest, you may be held in custody until your brought before the Court .Yours faithfully,Angela Malone.Clerk of Court."Another malicious email.
an anonymous userhttps://www.onlinethreatalerts.com/users/#an-anonymous-userDec 27, 2017 by 7-Zip Archive (.7z) Malicious Email Attachmentsan anonymous user from: Quezon City, National Capital Region, PhilippinesHi! Just received one attachment via facebook messenger with a file as video_8095.mp4.7z as an attachment. The messenger app cannot view it but is seen from the browser. Is this also the same malware infected program? I am hesitant to open it.
an anonymous userhttps://www.onlinethreatalerts.com/users/#an-anonymous-userDec 28, 2017 by 7-Zip Archive (.7z) Malicious Email Attachmentsan anonymous user from: San Juan, National Capital Region, PhilippinesGot also one today. Did't open it.
an anonymous userhttps://www.onlinethreatalerts.com/users/#an-anonymous-userDec 28, 2017 by 7-Zip Archive (.7z) Malicious Email Attachmentsan anonymous user from: Tacloban City, Eastern Visayas, Philippinesdont open it! mobile phone messenger cant open it since its not intended to ran on mobile phones, and just what the article said it will infect your pc.. so it is intended to harm your computer..
an anonymous userhttps://www.onlinethreatalerts.com/users/#an-anonymous-userDec 26, 2017 by 7-Zip Archive (.7z) Malicious Email Attachmentsan anonymous user from: Lecanto, Florida, United States12/26/2017Received similar .7z attachment emailSender (Terrell-mail316.us3.mcdlv.net)Attachment: CCE26122017_006144.7ZAttachment naming scheme seems to be letters (CCE) followed by today's date (26122017) = 26-12-2017.
infohttps://www.onlinethreatalerts.com/users/#infoDec 20, 2017 by 7-Zip Archive (.7z) Malicious Email AttachmentsinfoHere is another scam:"Voicemail from 01770405763 <01770405763> 2m 22sMessage From "01770405763" 01770405763Created: Thu, 21 Dec 2017 07:54:00 0700Duration: 2m 22sAttachment: msg_21_12_01770405763-8442763.7z 2 KB"
infohttps://www.onlinethreatalerts.com/users/#infoSep 29, 2017 by 7-Zip Archive (.7z) Malicious Email AttachmentsinfoHere is another scam:"InvoiceFri 29/09/2017 11:30From: "Roberto Kilner"Attachment: 869572.7zHi,Invoice attached for the Office365 account.RegardsRoberto Kilner"
infohttps://www.onlinethreatalerts.com/users/#infoSep 27, 2017 by 7-Zip Archive (.7z) Malicious Email AttachmentsinfoHere is another scam:"Subject: Invoice PIS3021721Date: Tue 26/09/2017 23:25From: AutoPosted PI NotifierAttachment: InvoicePIS3021721.7zPlease find Invoice PIS3021721 attached."
infohttps://www.onlinethreatalerts.com/users/#infoSep 3, 2017 by 7-Zip Archive (.7z) Malicious Email AttachmentsinfoReceived the following question via a Facebook message:"Is the app 7 Zip itself malware?"Answer:No, 7-Zip is not a malware. It is a legitimate and free file compression format used to reduce the size of files.But, cyber criminals are using it to store their malware in, to help prevent antivirus software from detecting them.