Online crooks often use fake “order notification’ emails as a means of distributing malware.
Typically, such emails thank you for purchasing and claim that your order is being processed. They do not name the company that supposedly sent the notifications. Nor do they say what product or service was supposedly purchased.
However, they do include an order total amounting to several thousand dollars along with an order number, order date and customer email address.
They suggest that people check the attached file to find out more information about the purchase.
The emails are formatted fairly professionally and may appear to be genuine at first glance.
Details such as subject lines, order totals, and attachment names may vary in different versions of the emails.
Some have the subject line ‘Urgent Notice’. Others may have the subject line ‘Important Notification’.
However, the emails are certainly not genuine order notifications and the order details included are not valid.
The criminals responsible for the emails hope that at least a few recipients – panicked into believing that a large purchase has been made in their names – will open the attachment without due caution.
However, the attached .zip file harbours malware. If you unzip the attachment and then click the file inside, the malware may be installed on your computer.
To enhance your privacy and security and offer you a better user experience, Hoax-Slayer is now ad-free! Can you help us stay online?
The behaviour of the malware may vary based on the specific goals of the criminals who send it. The malware may collect sensitive information from the infected computer and relay it to scammers. It may also download further malware, and join the computer to a botnet.
Fake order receipt emails are a very common means of distributing malware. Be wary of any unsolicited email that claims to contain information regarding a purchase you know nothing about. If you receive such an email do not click any links or open any attachments that it contains.
Subject: Important Notification B041557794
Thank you for purchasing with us today! Your order is on process at present.
Order Total: 3592 AU Dollars
Please check the word file provided below to view more information about your order.
Order Number: ODI723430099
Order Date: 12.17 Mar 02, 2015
Customer Email: [removed]
Attachment name: Payment details W880742251.zip
Subject: Urgent Notice P414296231
Thanks for purchasing with our company today! Your order is currently processing.
Order Total: 5155 AU Dollars
Kindly check the invoice given below to view more information about this issue.
Order Number: DXX889907299
Purchase Date: 6.46 Monday, Mar 2 2015
Purchaser Email: [removed]
Attachment name: Payment details S411028064.zip
Since you’ve read this far……can I ask you for a big favour?
To enhance your privacy and security and offer you a better user experience, Hoax-Slayer is now ad-free. To keep the site online, I now rely on voluntary contributions from site visitors along with commissions from a few trusted products and services that I promote via reviews on the site.
If you found the above report useful, please consider supporting Hoax-Slayer by making a donation. Any amount you can give will be greatly appreciated.
You can donate using your credit card via the form below. Donations are collected securely via the online payment service Stripe. Stripe uses state of the art security to keep your data safe.