I got many scam e-mails with the subjects like "Hearing of your case in Court SN0990", "Notice of appearance in court No9812" from help7561@islamiclawyers.com, reference6317@bushlewislawyers.com, answer806@petlawyers.com,....
In my case it was easy to see that the e-mail was from scammers. See how many antiviruses detected a virus in the file:
From: "Notice to appear" answer806@petlawyers.comThe scammer's e-mail come with in attachment like "Notice_to_Appear_SN0990.zip" . It is the attachment that makes you understand that this e-mail is not a legit one. Luckily we have a ZIP archive, so it can be safely saved onto your disk. But I do not recommend to open such attachments or save them onto your disk anyway. Many newer e-mail services allow you to save attachments to cloud services. Save the attachment to the cloud, then create a public link for it. Then navigate to a free virus checking service Virus Total and scan the attachment by providing a web link to it.
To: vasya@pupkin.ru
April 1, 1:49
1 file
Notice to appear,
Hereby you are notified that you have been scheduled
to appear for your hearing that will take place
in the court of Tampa in May 22, 2014 at 11:45 am.
You are kindly asked to prepare and bring
the documents relating to the case to court on the specified date.
The copy of the court notice is attached to this letter,
please, download and read it thoroughly.
Note: The case may be heard by the
judge in your absence if you do not come.
Yours truly,
PARRISH HARTMAN
Clerk to the Court.
In my case it was easy to see that the e-mail was from scammers. See how many antiviruses detected a virus in the file:
Antivirus | Result | Update |
---|---|---|
AVG | PSW.Generic12.AIAG | 20140403 |
Ad-Aware | Trojan.GenericKD.1627712 | 20140403 |
Agnitum | Backdoor.Androm!OL49BmuAz4I | 20140403 |
AntiVir | TR/Kuluoz.A.71 | 20140403 |
Antiy-AVL | Worm/Win32.AutoRun | 20140403 |
Avast | Win32:Trojan-gen | 20140403 |
Baidu-International | Backdoor.Win32.Androm.AS | 20140403 |
BitDefender | Trojan.GenericKD.1627712 | 20140403 |
Bkav | W32.DownloadZortobF.Trojan | 20140403 |
Commtouch | W32/Trojan.NXPN-0725 | 20140403 |
Comodo | UnclassifiedMalware | 20140403 |
DrWeb | BackDoor.Kuluoz.4 | 20140403 |
ESET-NOD32 | Win32/TrojanDownloader.Zortob.B | 20140403 |
Emsisoft | Trojan.GenericKD.1627712 (B) | 20140403 |
F-Prot | W32/Trojan3.HYE | 20140403 |
F-Secure | Trojan.GenericKD.1627712 | 20140403 |
Fortinet | W32/Lockscreen.LOA!tr | 20140403 |
GData | Trojan.GenericKD.1627712 | 20140403 |
Ikarus | Trojan-Spy.Zbot | 20140403 |
Kaspersky | Backdoor.Win32.Androm.drfl | 20140403 |
Malwarebytes | Trojan.Inject | 20140403 |
McAfee | PWS-Zbot-FATG!D185A21BF355 | 20140403 |
McAfee-GW-Edition | PWS-Zbot-FATG!D185A21BF355 | 20140403 |
MicroWorld-eScan | Trojan.GenericKD.1627712 | 20140403 |
Microsoft | TrojanDownloader:Win32/Kuluoz.D | 20140403 |
Norman | Kryptik.CDKX | 20140403 |
Panda | Generic Malware | 20140403 |
Qihoo-360 | HEUR/Malware.QVM20.Gen | 20140403 |
Rising | PE:Malware.FakeDOC@CV!1.9C3C | 20140403 |
Sophos | Mal/DrodZp-A | 20140403 |
Symantec | Trojan.Fakeavlock | 20140403 |
TrendMicro | BKDR_KULUOZ.JYC | 20140403 |
TrendMicro-HouseCall | TROJ_GEN.F47V0331 | 20140403 |
VIPRE | Trojan.Win32.Generic!BT | 20140403 |
ViRobot | Trojan.Win32.Zbot.135680.K | 20140403 |
nProtect | Trojan.GenericKD.1627712 | 20140403 |
No comments:
Post a Comment