Email: Suspicious Emails

Follow

Below you will find a collection of known suspicious/malicious examples. If you receive one of these messages or a message like it, please contact your local IT support technician to verify your system and network integrity and to consult on the best course of action for your practice.

Tax Spam Emails

If you receive email regrading an incorrectly filed tax form, do not click on any links or open any attachments. This is an attempt by the sender to install malware onto your computer. Below is an example of one of the these types of emails:

 

An indicator in this example is that there is no contact information in the email for the company or organization in the email. There is also no mention of the company or organization name of the sender.

Another indicator is the use of the word "Attention " followed by several exclamation points "!". If this was a legitimate email, it would be addressed to the tax account holder's name.

Unsolicited Google Doc Links

Below is an example of an email that asks you to click on a link and log into a "Google Docs" account to access an unspecified document.

 

If you hover your mouse over the link, you will see a pop-up with the actual website address (URL). You can see in the example below, that this is not a Google related address. Also, note the generic subject line and the undisclosed addresses. This is an attempt from a spammer to either get your login formation and/or install malware onto your computer. Do not click on any links in the email or download any documents or attachments.

 

Fake American Express Personal Security Key

Spammers are sending emails that appear to be from American Express,do not click on any links in the email or open any attachments.

By hovering your mouse over any link in the email, you will see the actual website name which does not make any reference to American Express websites.

Below are examples of emails not sent from American Express

 

 

 

Emails Regarding Actor Paul Walker's Crash

If you receive email regrading a reward about the actor Paul Walker's crash, do not click on any links or open any attachments. This is an attempt by the sender to install malware onto your computer. Below is an example of one of the these types of emails:

In the example below, you can see where it's stated that the attachment can only be viewed on a Windows-based PC. This as an indicator that this is not a legitimate email.

Voice Message From BANK OF AMERICA

If you receive an email from  "Voice Mail" containing an attachment labeled"voice_ message_10212013.zip" or a variation, DO NOT OPEN THE ATTACHMENT. This is an attempt from unknown senders to get malware onto your system. Delete the email. If you have opened the file, it is advisable to contact your local technical support team and have them look at your computer system for viruses and other types of malware.

Other variations include:

  • Fiserv Secure Email Notification.
  • Overdue Payment - Please Respond series.
  • Key Secured Message
  • The UPS - Your package is available for pickup series.
  • The AT&T online confirmation series.
  • The Invoice Remit File - ADP/AEXP split.
  • Job Offer (Careerbuilder)
  • Unable to process your most recent Bill Payment
  • Fiserv Secure Email Notification
  • Outgoing Money Transfer
  • UPS - Your package is available for pickup
  • Last Month Remit



Last Month Remit

If you receive an email "Administrator" containing an attachment labeled "Remit_ your website name.zip". DO NOT OPEN THE ATTACHMENT. This is an attempt from unknown senders to get malware onto your system. Delete the email. If you have opened the file, it is advisable to contact your local technical support team and have them look at your computer system for viruses and other types of malware.

The body of the email lists the file as "Last month remit file.xls" (a Microsoft Excel spreadsheet). Do not open the attachment

Other variations include:

  • Fiserv Secure Email Notification.
  • Overdue Payment - Please Respond series.
  • Key Secured Message
  • The UPS - Your package is available for pickup series.
  • The AT&T online confirmation series.
  • The Invoice Remit File - ADP/AEXP split.
  • Job Offer (Careerbuilder)
  • Unable to process your most recent Bill Payment
  • Fiserv Secure Email Notification
  • Outgoing Money Transfer
  • UPS - Your package is available for pickup
  • Last Month Remit


Emails From PayPal

Spammers will send emails that appear to be from PayPal. If you're not expecting an email from PayPal, do not click on any links in the email or open any attachments.

Below is an example of an email not sent from PayPal

PayPalScamJuly242013.jpg

Spammers will send emails that appear to be from PayPal. If you're not expecting an email from PayPal, do not click on any links in the email or open any attachments

By hovering your mouse over the links, you will see that the link does not lead to a website ending in "paypal.com." Do not click the link.

Below are examples of an email not sent from PayPal

 

PayPalScam_Sep03_A.jpg

 

PayPalScam_Sep03_B.jpg

Emails From EFax

Spammers are sending emails that appear to be from eFax, do not click on any links in the email or open any attachments.

Below are examples of emails not sent from eFax.

FakeEfaxEmail1_Aug052013.jpg

 

FakeEfaxEmail2_Aug052013.jpg

 

Emails From American Express

Spammers are sending emails that appear to be from American Express, do not click on any links in the email or open any attachments.

Below are examples of emails not sent from American Express

FakeAmeExEmail_Aug022013.jpg

 

FakeAmeExEmail2_Aug022013.jpg

Emails From Docusign

Spammers are sending emails that appear to be from Docusign, do not click on any links in the email or open any attachments.

Below is an example of an email not sent from Docusign

fakedocusendemail_July292013.JPG

 

Do not click on any links in emails that look suspicious or are unexpected. If you have any questions regarding the legitimacy of an email, you can contact the sender if you know them or contact PBHS support (1 (888) 840-0739).

 

Was this article helpful?
0 out of 0 found this helpful
Have more questions? Submit a request

Comments

Powered by Zendesk