Home Malware ‘Application For Leave’ Emails Contain Malware
Malware

‘Application For Leave’ Emails Contain Malware

written by Brett M. Christensen November 9, 2015

Computer virus attack

 

Inboxes are currently being hit by emails that claim that a request for leave has been approved. The emails list the proposed dates for the leave and include a company name. An attached .zip file supposedly contains more information about the leave application.

However, the emails are not genuine company notifications and the attachment does not contain a leave application document.

The .zip file contains a malicious .exe file that, if opened, can install malware on Windows based computers. Once installed, this malware may download even more malware and steal information such as account usernames and passwords.

Details, such as the name of the company supposedly granting the leave and the dates of the leave may vary in different versions of the malware emails.

The criminals responsible for this malware campaign know that at least a few recipients will likely open the attachment because they think that a mistake has been made  and they are curious to find out more. Such simple social engineering tricks can be very effective.

If you receive one of these emails, do not click any links or open any attachments that it contains.




Example:

Subject: Application for Leave

Your request for MMMU-3C Leave for the period 30/10/15 to 30/10/15 returning to work on 02/11/15, has been APPROVED

Managers Comments:
Company: Charles Schwab Corp.
Note: This e-mail has been sent to you by the Preceda messaging service . Please do not reply directly to this e-mail.




 

Since you’ve read this far…

…can I ask you for a big favour?

To enhance your privacy and security and offer you a better user experience, Hoax-Slayer is now ad-free. To keep the site online, I now rely on voluntary contributions from site visitors along with commissions from a few trusted products and services that I promote via reviews on the site.

If you found the above report useful, please consider supporting Hoax-Slayer by making a donation. Any amount you can give will be greatly appreciated.

You can donate using your credit card via the form below. Donations are collected securely via the online payment service Stripe. Stripe uses state of the art security to keep your data safe.

Thank-you.
Brett Christensen