"Missing Invoice" Malicious Emails
During our examination, we found that the email in question is created by cybercriminals with the intent to deceive users into infecting their computers. Disguised as a notification concerning a missing invoice, the email includes a malicious attachment designed to introduce Formbook into computer systems.
In this deceptive email, the recipient is addressed urgently, suggesting the presence of a missing invoice that demands immediate attention. The sender emphasizes swift action and requests a copy of the bank payment confirmation if the mentioned invoice has already been settled.
The email incorporates a threat, asserting that failure to clear the payment before the specified date will result in subsequent orders or inquiries being ignored. The email's tone and urgency exhibit classic characteristics of a phishing attempt, intending to manipulate the recipient into opening the attachment.
The attached file in this email, a Word document, serves as a vehicle for distributing the Formbook malware. This malicious software diligently monitors computer activities, capturing keystrokes, taking screenshots, and extracting various data, including details from visited websites, clipboard contents, and saved logins/passwords.
Importantly, FormBook extends beyond data collection; it is also capable of executing commands sent from remote Command and Control servers. These commands empower malicious actors to perform a variety of remote tasks, ranging from system reboots and shutdowns to downloading and executing files, potentially resulting in additional high-risk computer infections or system corruption.
How Can You Identify a Malicious of Scam Email?
Identifying a malicious or scam email involves paying attention to various elements of the email and being cautious about potential red flags. Here are some tips to help you recognize a malicious or scam email:
Check the Sender's Email Address:
Verify the sender's email address. Be wary of emails from unfamiliar or suspicious addresses, especially if the email claims to be from a well-known organization.
Examine the Email Subject Line:
Be cautious of subject lines that create a sense of urgency, use excessive punctuation, or appear unusual. Scam emails often use urgent language to prompt quick action.
Verify Links Before Clicking:
Hover over any links in the email without clicking to preview the destination URL. Ensure that the link matches the supposed sender's website and be cautious if the URL looks suspicious.
Avoid Downloading Attachments from Unknown Sources:
Be cautious of unexpected email attachments, especially if they come from unknown or unexpected sources. Malicious attachments can contain malware.
Look for Unusual Requests:
Be skeptical of emails requesting sensitive information such as passwords, credit card details, or social security numbers. Legitimate organizations typically do not ask for such information via email.
Verify Email Signature and Contact Information:
Check the sender's email signature and contact information. Legitimate organizations usually provide clear and accurate contact details.
Be Wary of Unsolicited Offers or Deals:
Scam emails often promise unrealistically good deals, prizes, or offers. If it sounds too good to be true, it probably is.
