Payment Demand

Nigerian scams, chain letters, pyramid schemes and anything not auction related.
Post Reply
MilliesMum36
Members
Posts: 1
Joined: Thu Mar 24, 2016 3:59 am
First Name: Denise

Payment Demand

Post by MilliesMum36 » Thu Mar 24, 2016 10:48 am

I have now received 4 of the below e-mails and have absolutely no idea where they come from. I will not open a blank attachment so this also remains a mystery. It is obviously a scam and I keep blocking these but then another one pops up. Has anyone else had this sort of e-mail ?
This is the text of the e-mail :-
If there is any reason why payment should not be made or if you are experiencing difficulties
with making the payment please get in touch so that we can discuss the matter and stop the recovery process.
Full details are attached to this email.
Regards,
Neva Horton
Director Audit Services

User avatar
digidog
Site Admin
Posts: 15014
Joined: Wed May 05, 2004 2:25 am
First Name: Alfie
Location: Otago
Contact:

Re: Payment Demand

Post by digidog » Fri Mar 25, 2016 12:46 am

Hi Denise and welcome to ScamBusters.

It's almost certain that the attachment contains malware, so you've done well not to open it.

This type of scam has several variants -- all of them imply a sense of urgency to encourage the recipient to open the attachments. Once you do that all manner of bad things can happen, but the most likely scenario at the moment is some form of ransomware. That encrypts all of your files then demands a ransom be paid in untraceable bitcoins to unlock them. There's a link to more information on this page.

I'd suggest you block the sender's address and delete the emails. Feel free to post the sender's email address here as it may help others who receive similar scam emails in the future.

ionet
Members
Posts: 2160
Joined: Fri Feb 18, 2005 2:33 pm
Location: Hawkes Bay

Re: Payment Demand

Post by ionet » Fri Mar 25, 2016 2:21 pm

_


Have been receiving dozens of these over the past week - all with attachments
and with varying Subject lines

They can be automatically deleted to Deleted Items by filtering on the Subject Line content
in Outlook, but these have been changing needing new filtering rules

They appear to come from all range of global servers - IN DE IR VN and more

Some show your email address as sender, many with other addresses and names

It's likely they are from Spambot networks or compromised computers

We have been reporting them by forwarding them off as an attachment to:

spam@uce.gov
spam@knujon.net
phishing@knujon.net

Never ever attempt to open the attachments unless you know what you are
doing and can deal with viruses, or other payloads the attachments may
have onboard

The variation of these coming in right now and currently is:

Subject Line:

$617,60 Penalty or similar

and Message Body:
The payment notice for the penalty ID:57509811 is enclosed hereby.

with nothing else apart from attachment similar to:
Scan_57509811.zip (3.98 kb)

M

_
Ultimate Auction Security: Kick 'em in the pants & sweep them under the carpet fast before anyone sees & hope they go away.

User avatar
digidog
Site Admin
Posts: 15014
Joined: Wed May 05, 2004 2:25 am
First Name: Alfie
Location: Otago
Contact:

Re: Payment Demand

Post by digidog » Mon Mar 28, 2016 8:38 pm

Here's another variant received today.
IRD-scam-march-2016.jpg
IRD-scam-march-2016.jpg (51.91 KiB) Viewed 862 times
Note the mispelt "exemple". The attachment appears to be an HTML file, but a peek at the underlying code suggests it contains javascript and probably some nasty malware.

Post Reply

Who is online

Users browsing this forum: No registered users and 2 guests