Oh look someone’s bought me something from Tiffany and Co . . . or so they want me to think

Getting a lot of spam/phishing emails this morning from k.parker@tiffany.co.uk

The Email purports to come from “Karen Parker” at the  jewellers Tiffany & Co and has an attached zip file which supposedly contain a payment invoice and export license relating to I presume something they wish you to think you or someone has bought from them.

The email message looks something like this :

 

Subject: Invoice copy
From: Karen Parker [Kk.parker@tiffany.com]

Kindly open to see export License and payment invoice attached, 
meanwhile we sent the balance payment yesterday. 
Please confirm if it has settled in your account or you can call if 
there is any problem. 

Thanks 
Karen parker

The message however is  not from Tiffany &Co and it most certainly does not contain a payment invoice.  What is attached in the .zip file is  a dodgy .exe file that, when opened,will attempt to install a trojan on your PC.

The trojan is intended to install and hopefully mine/collect personal information from your PC, this could email addresses/passwords/banking website logins etc, once it has retrieved this information it then in effect dials home, which is probably a control server somewhere in the former USSR where it deposits this information, at the same time it’s doing this there’s always a chance that it’s downloading other malware from its originating control server, thus infecting your machine and possibly attaching it to a BotNet.

So if you get an email from Karen Parker at Tiffanys & Co, don’t be thinking hubby/wife’s bought you a nice bit of jewellry for Christmas and open the Zip file, because you’ll definitely regret it.

Just delete it

If  you do need any advice on removing Trojan’s/Malware, feel free to contact me via the comments and I’ll be more than happy to advise or assit.

Leave a Reply

Your email address will not be published.

This site uses Akismet to reduce spam. Learn how your comment data is processed.