Avast technicians, the security and antivirus company, have warned of a new digital scam campaign aimed at CaixaBank users. On this occasion, the route chosen by criminals is email.
Under a false identity that tries to impersonate the bank, scammers seek to fraudulently obtain sensitive data from their victims, such as passwords and computer information.
And to do so, they use a message. As they have been able to detect from Avast, this comes mainly from two addresses: UAFE Mailbox (buzon.uafei@caixa-bank.com), and UAFE Mailbox (buzon.uafe@caixa-bank.com). When opened, the appearance of the message is what an official email from the company could present, with the company logo, as well as identity elements of the bank.
. warns about a malicious email campaign from , malspam, in Spain ???????? addressed to clients of , which is sent from the addresses: UAFE Mailbox, and UAFE Mailbox
(1/4)
— AVAST Software ES (@avast_ESP)
When reading the email, you can see that the message is concise. With the subject ‘UNPAID’, the text simply consists of a sentence: “Good morning, I have attached proof of a return”.
The trap, precisely, is found in that attached file, ‘liqefe096543.rar’, which, when unzipped, executes a file titled ‘liqefe096543.ex’. This “is a malware called Guloader that downloads the AgentTesla spyware which can steal passwords and information from the victim’s computer,” the security company explains.
To avoid fraud, Avast recommends users who receive this message to delete the email, as well as other similar ones that may arrive in their inbox. “Users who have doubts about whether a message they receive is real or fake should not click on any link or attachment,” they say.
Facebook Comments
Disqus