subcard@uk-ie.subwaysubcard.eu Scam Email - Order Being Processed Home Categories Malware subcard@uk-ie.subwaysubcard.eu Scam Email - Order Being Processed 4 4 1.26K 1 5y ago 2020-12-11T05:55:17-05:00 5y ago 2020-12-11T07:34:32-05:00 Online Threat Alerts If you have received an email like the one below that appears to have been sent from subcard@uk-ie.subwaysubcard.eu, which claims your order documents are ready and awaiting confirmation, please do not click the link in it. This is because the link in the fake email goes to a malicious website that asks visitors to download a malicious Microsoft Office Excel document that will infect their computers with viruses and other malware. The subcard@uk-ie.subwaysubcard.eu Scam EmailThe malicious Microsoft Office Excel document contains a password to prevent anti-virus software and anti-malware from detecting the Macro virus or malware in it. But, the malicious document cannot do anything unless the person who downloaded it "Enable Editing" and "Enable Content" from the yellow bar. This is is why it is important that online users never open password-protected Microsoft Office documents, "Enable Editing" and "Enable Content".The Malicious Microsoft Office Excel DocumentOnline users who have already opened the malicious document, "Enable Editing" and "Enable Content" are asked to scan their computers with the antivirus software installed on them to remove malware that may have been installed by the malicious Office Excel document. Check the comment section below for answers or additional information. Share what you know, or ask a question about this article by leaving a comment below. Online Threat Alerts is not affiliated with or endorsed by any trademark owner mentioned in this article. Some of the information in samples in this article may have been impersonated or spoofed. Save + Was this article helpful? (1) (0) More For You Elegance on Wheels and the Evolution of Luxury Automobiles Are You Ready to Unsheath the Cyber Katana? Navigating the Digital Frontier NYS DMV Text Scam - Update Contact Information Is Powerwheelstoys Com a Scam? Review Of The Online Store epicgamesscamcenter@gmail.com Epic Game Center Scam Thormailer.com used to Send subcard@uk-ie.subwaysubcard.eu Scam Emails Fedex Amazon Delivery to be Rescheduled Text Scam Husky 1025 Piece Tool Set Scam Online Store Is Newzza a Scam? Review of the Online Store Is Zearven a Scam? Review of the Online Store Is Comestheguide a Scam? Review of the Online Store 'www.dshn-cloud.cn' - it is a Fake CN and ASIA Domain Name Registration Website www.computerture.win - it is a Fraudulent Domain Service Registration Website Virus Email - IRS Notification Fiscal Activity 2015 Comments / Answers Remove sensitive information from your post. Your IP address will be used to display your estimated location. Enter comment post here 4an anonymous userhttps://www.onlinethreatalerts.com/users/#an-anonymous-userDec 11, 2020 at 1:15 PM by subcard@uk-ie.subwaysubcard.eu Scam Email - Order Being Processedan anonymous user from: North Lincolnshire, Brigg, England, United KingdomHad two emails and both come from the same source as previous legit subway emailsSPAM EMAIL:ARC-Authentication-Results: i=1; mx.google.com; dkim=pass header.i=-UK-IE.subwaysubcard.eu header.s=cm header.b=K5SqJtWC; dkim=pass header.i=-cmail2.com header.s=cs2013 header.b="E/oeDTFJ"; spf=pass (google.com: domain of subcard-mtllhz1jhtriuhkdd1i-cmail20.com designates 203.55.21.201 as permitted sender) smtp.mailfrom=Subcard-mtllhz1jhtriuhkdd1i-cmail20.comReturn-Path: Received: from mx201.a.outbound.createsend.com (mx201.a.outbound.createsend.com. [203.55.21.201])LEGIT EMAIL:ARC-Authentication-Results: i=1; mx.google.com; dkim=pass header.i=-UK-IE.subwaysubcard.eu header.s=cm header.b=vMcqLGAI; dkim=pass header.i=-cmail2.com header.s=cs2013 header.b=KPjU9QAw; spf=pass (google.com: domain of subcard-mjhjyik1jktjdhutht1i-cmail20.com designates 27.126.146.33 as permitted sender) smtp.mailfrom=Subcard-mjhjyik1jktjdhutht1i-cmail20.comReturn-Path: Received: from mx33.b.outbound.createsend.com (mx33.b.outbound.createsend.com. [27.126.146.33])subway systems or their mailing software partner have been breachedinfohttps://www.onlinethreatalerts.com/users/#infoDec 11, 2020 at 1:53 PM by subcard@uk-ie.subwaysubcard.eu Scam Email - Order Being ProcessedinfoIt is seems as if they are using a email newsletter software called CreateSend at thormailer.coman anonymous userhttps://www.onlinethreatalerts.com/users/#an-anonymous-userDec 11, 2020 at 12:08 PM by subcard@uk-ie.subwaysubcard.eu Scam Email - Order Being Processedan anonymous user from: E1, London, England, United KingdomJust had the same email and blocked it.an anonymous userhttps://www.onlinethreatalerts.com/users/#an-anonymous-userDec 11, 2020 at 8:46 AM by subcard@uk-ie.subwaysubcard.eu Scam Email - Order Being Processedan anonymous user from: York, England, United KingdomI've had one today saying "Thank you for shopping with us, you'll find a summary of your order below" with a link. Luckily I did not click it as I knew I hadn't ordered anything.
an anonymous userhttps://www.onlinethreatalerts.com/users/#an-anonymous-userDec 11, 2020 at 1:15 PM by subcard@uk-ie.subwaysubcard.eu Scam Email - Order Being Processedan anonymous user from: North Lincolnshire, Brigg, England, United KingdomHad two emails and both come from the same source as previous legit subway emailsSPAM EMAIL:ARC-Authentication-Results: i=1; mx.google.com; dkim=pass header.i=-UK-IE.subwaysubcard.eu header.s=cm header.b=K5SqJtWC; dkim=pass header.i=-cmail2.com header.s=cs2013 header.b="E/oeDTFJ"; spf=pass (google.com: domain of subcard-mtllhz1jhtriuhkdd1i-cmail20.com designates 203.55.21.201 as permitted sender) smtp.mailfrom=Subcard-mtllhz1jhtriuhkdd1i-cmail20.comReturn-Path: Received: from mx201.a.outbound.createsend.com (mx201.a.outbound.createsend.com. [203.55.21.201])LEGIT EMAIL:ARC-Authentication-Results: i=1; mx.google.com; dkim=pass header.i=-UK-IE.subwaysubcard.eu header.s=cm header.b=vMcqLGAI; dkim=pass header.i=-cmail2.com header.s=cs2013 header.b=KPjU9QAw; spf=pass (google.com: domain of subcard-mjhjyik1jktjdhutht1i-cmail20.com designates 27.126.146.33 as permitted sender) smtp.mailfrom=Subcard-mjhjyik1jktjdhutht1i-cmail20.comReturn-Path: Received: from mx33.b.outbound.createsend.com (mx33.b.outbound.createsend.com. [27.126.146.33])subway systems or their mailing software partner have been breached
infohttps://www.onlinethreatalerts.com/users/#infoDec 11, 2020 at 1:53 PM by subcard@uk-ie.subwaysubcard.eu Scam Email - Order Being ProcessedinfoIt is seems as if they are using a email newsletter software called CreateSend at thormailer.com
an anonymous userhttps://www.onlinethreatalerts.com/users/#an-anonymous-userDec 11, 2020 at 12:08 PM by subcard@uk-ie.subwaysubcard.eu Scam Email - Order Being Processedan anonymous user from: E1, London, England, United KingdomJust had the same email and blocked it.
an anonymous userhttps://www.onlinethreatalerts.com/users/#an-anonymous-userDec 11, 2020 at 8:46 AM by subcard@uk-ie.subwaysubcard.eu Scam Email - Order Being Processedan anonymous user from: York, England, United KingdomI've had one today saying "Thank you for shopping with us, you'll find a summary of your order below" with a link. Luckily I did not click it as I knew I hadn't ordered anything.