Post by iconic944ss on Sept 2, 2013 16:23:51 GMT
I received an Scam Email today that appeared to be from the Land Registery using address:
noreply.efees@landregistry.gsi.gov.uk
and the Subject: Notification of Direct Debit Fees
My suspicions were instantly aroused when an attachment contained TWO files buried within one another.
However, the text of the Email contained links, telephone numbers and details of a solicitors local to me:
(http://www.qualitysolicitors.com/punchrobson) - its a legit site, dont worry.
The scam is that it appears to warn the user of funds for services rendered being withdrawn soon via Direct Debit,
it then invites you to open the attachment for details.
DONT DO THIS - DONT DOWNLOAD THE FILE.
DELETE THE EMAIL and run a Virus / Malware scan if you feel the need.
For the geeky amongst us here are details of the threat:
Threat: PWS:Win32/Kegotip.C
Category: Password Stealer
Description: This program is dangerous and captures user passwords.
Recommended action: Remove this software immediately.
Items: 1 file: C:\Users\Me\AppData\Local\Temp\VLUE83F\ygb6Jid.exe
Cheers - Frank
noreply.efees@landregistry.gsi.gov.uk
and the Subject: Notification of Direct Debit Fees
My suspicions were instantly aroused when an attachment contained TWO files buried within one another.
However, the text of the Email contained links, telephone numbers and details of a solicitors local to me:
(http://www.qualitysolicitors.com/punchrobson) - its a legit site, dont worry.
The scam is that it appears to warn the user of funds for services rendered being withdrawn soon via Direct Debit,
it then invites you to open the attachment for details.
DONT DO THIS - DONT DOWNLOAD THE FILE.
DELETE THE EMAIL and run a Virus / Malware scan if you feel the need.
For the geeky amongst us here are details of the threat:
Threat: PWS:Win32/Kegotip.C
Category: Password Stealer
Description: This program is dangerous and captures user passwords.
Recommended action: Remove this software immediately.
Items: 1 file: C:\Users\Me\AppData\Local\Temp\VLUE83F\ygb6Jid.exe
Cheers - Frank