Malware on Laptop Computer
Home Malware Eviction Notice Malware Email

Eviction Notice Malware Email

by Brett M. Christensen


Email claims that recipients have been evicted and must vacate their premises within a specified time frame or risk further legal proceedings.  Recipients are instructed to open an attached file for more information about the eviction.

Brief Analysis

The supposed eviction notice is bogus. The message is designed to panic recipients into opening the attached file, which contains malware. If this email comes your way, do not open any attachments or click any links that it contains.


Eviction Notification,

Please be advised that you are obliged to
vacate the living space you occupy until March 28, 2014, 11 a.m.

If you do not vacate it in the specified terms,
the court will have to assign the forcible eviction for April 5, 2014, 11 a.m.
If nobody is home we will not be responsible for safe keeping of your belongings.
Besides, if you fail to comply with the requirements of the court bailiff
you will be fined for up to 200 minimum wage amounts
with a subsequent doubling of the penalty amount
and can be made criminally or administratively liable.

The details of the circumstances that caused the judicial decision

of eviction are attached herewith.


Detailed Analysis

A rather threatening email purporting to be an eviction notice has been hitting inboxes around the world.  The email informs recipients that they are obligated to leave their premises within a specified time frame.

Recipients are informed that if they do not move out within the time frame provided, they will be forcibly removed along with their property by order of the Court. They are also warned that they may have to pay fines and face other legal consequences if they do not comply with the eviction notice.

Recipients are instructed to open an attached file to view further information about the eviction.

However, the message is bogus and was not sent by the court or any other legal authority. The message is intended to scare recipients into opening the attached file without due caution.
Those who do open the attached .zip file in the hope of finding more information about the supposed eviction will instead find a .exe file. If they click this .exe file, malware may be installed on their computer. Typically, such malware can download and install further malware and join the infected computer to a network of compromised computers known as a botnet. Criminals can use botnets to distribute more malware, send spam and launch further scam campaigns.

Details in the malware emails may vary. There are several versions with different wording, subject lines, and “eviction” dates. But all claim that recipients must vacate their homes within a given time frame or face forced eviction and further legal consequences.

This campaign is very similar to another recent malware attack that claimed that recipients were obligated to appear in court on a specified date. Again, an attachment with the emails contained malware.

If one of these emails comes to your inbox, do not open any attachments or click any links that it contains.

Importance Notice

After considerable thought and with an ache in my heart, I have decided that the time has come to close down the Hoax-Slayer website.

These days, the site does not generate enough revenue to cover expenses, and I do not have the financial resources to sustain it going forward.

Moreover, I now work long hours in a full-time and physically taxing job, so maintaining and managing the website and publishing new material has become difficult for me.

And finally, after 18 years of writing about scams and hoaxes, I feel that it is time for me to take my fingers off the keyboard and focus on other projects and pastimes.

When I first started Hoax-Slayer, I never dreamed that I would still be working on the project all these years later or that it would become such an important part of my life. It's been a fantastic and engaging experience and one that I will always treasure.

I hope that my work over the years has helped to make the Internet a little safer and thwarted the activities of at least a few scammers and malicious pranksters.

A Big Thank You

I would also like to thank all of those wonderful people who have supported the project by sharing information from the site, contributing examples of scams and hoaxes, offering suggestions, donating funds, or helping behind the scenes.

I would especially like to thank David White for his tireless contribution to the Hoax-Slayer Facebook Page over many years. David's support has been invaluable, and I can not thank him enough.

Closing Date

Hoax-Slayer will still be around for a few weeks while I wind things down. The site will go offline on May 31, 2021. While I will not be publishing any new posts, you can still access existing material on the site until the date of closure.

Thank you, one and all!

Brett Christensen,