Wednesday, April 23, 2014

Scam e-mail: "Hearing of your case in Court SN0990", "Notice of appearance in court No9812"

I got many scam e-mails with the subjects like "Hearing of your case in Court SN0990", "Notice of appearance in court No9812" from help7561@islamiclawyers.com, reference6317@bushlewislawyers.com, answer806@petlawyers.com,....
From: "Notice to appear" answer806@petlawyers.com
To: vasya@pupkin.ru
April 1, 1:49
1 file

Notice to appear,

Hereby you are notified that you have been scheduled
to appear for your hearing that will take place
in the court of Tampa in May 22, 2014 at 11:45 am.

You are kindly asked to prepare and bring
the documents relating to the case to court on the specified date.

The copy of the court notice is attached to this letter,
please, download and read it thoroughly.
Note: The case may be heard by the
judge in your absence if you do not come.

Yours truly,
PARRISH HARTMAN
Clerk to the Court.
The scammer's e-mail come with in attachment like "Notice_to_Appear_SN0990.zip" . It is the attachment that makes you understand that this e-mail is not a legit one. Luckily we have a ZIP archive, so it can be safely saved onto your disk. But I do not recommend to open such attachments or save them onto your disk anyway. Many newer e-mail services allow you to save attachments to cloud services. Save the attachment to the cloud, then create a public link for it. Then navigate to a free virus checking service Virus Total and scan the attachment by providing a web link to it.



In my case it was easy to see that the e-mail was from scammers. See how many antiviruses detected a virus in the file:
Antivirus Result Update
AVG PSW.Generic12.AIAG 20140403
Ad-Aware Trojan.GenericKD.1627712 20140403
Agnitum Backdoor.Androm!OL49BmuAz4I 20140403
AntiVir TR/Kuluoz.A.71 20140403
Antiy-AVL Worm/Win32.AutoRun 20140403
Avast Win32:Trojan-gen 20140403
Baidu-International Backdoor.Win32.Androm.AS 20140403
BitDefender Trojan.GenericKD.1627712 20140403
Bkav W32.DownloadZortobF.Trojan 20140403
Commtouch W32/Trojan.NXPN-0725 20140403
Comodo UnclassifiedMalware 20140403
DrWeb BackDoor.Kuluoz.4 20140403
ESET-NOD32 Win32/TrojanDownloader.Zortob.B 20140403
Emsisoft Trojan.GenericKD.1627712 (B) 20140403
F-Prot W32/Trojan3.HYE 20140403
F-Secure Trojan.GenericKD.1627712 20140403
Fortinet W32/Lockscreen.LOA!tr 20140403
GData Trojan.GenericKD.1627712 20140403
Ikarus Trojan-Spy.Zbot 20140403
Kaspersky Backdoor.Win32.Androm.drfl 20140403
Malwarebytes Trojan.Inject 20140403
McAfee PWS-Zbot-FATG!D185A21BF355 20140403
McAfee-GW-Edition PWS-Zbot-FATG!D185A21BF355 20140403
MicroWorld-eScan Trojan.GenericKD.1627712 20140403
Microsoft TrojanDownloader:Win32/Kuluoz.D 20140403
Norman Kryptik.CDKX 20140403
Panda Generic Malware 20140403
Qihoo-360 HEUR/Malware.QVM20.Gen 20140403
Rising PE:Malware.FakeDOC@CV!1.9C3C 20140403
Sophos Mal/DrodZp-A 20140403
Symantec Trojan.Fakeavlock 20140403
TrendMicro BKDR_KULUOZ.JYC 20140403
TrendMicro-HouseCall TROJ_GEN.F47V0331 20140403
VIPRE Trojan.Win32.Generic!BT 20140403
ViRobot Trojan.Win32.Zbot.135680.K 20140403
nProtect Trojan.GenericKD.1627712 20140403

No comments:

Post a Comment