Malware – fake email about employment status
These messages contain attached files with harmful code and are classified as spam. Some variants, however, may slip through our filters. Be vigilant, and forward any messages of this type that you receive to the Incident Response Team.
The Incident Response Team has become aware of a type of fake email sent to LiU. The email purports to be from HR [at] liu [dot] se, and informs the employee that their employment has been terminated as a result of the COVID-19 pandemic. The email encourages the recipient to open an attachment or click on a link that contains receipt for payment for the coming two months of employment.
The attached file and link (which links to a Dropbox site that contains the same file) contains harmful code, and must not be opened under any circumstances.
If you or anyone else receives a variant of this email, forward it to email@example.com such that the Incident Response Team can use it to modify the LiU filters.
Our email filters have classified this as spam and Exchange Online has identified the attached file as containing harmful code and blocked it. However, there may be variants of the email that slip through the filters.
This is what the fake email looks like:
Subscribe to IT news
Receive a newsletter for LiU employees 4 times per semester with IT news. The newsletter is in Swedish, but many of the included articles are available in English. Subscribe here!
Latest IT related news
Last updated: 2020-06-09