Scam

Cancellation

If you received an email from Nathan Kaufman <Kaufman.19918@telkomsa.net> with the subject Cancellation that contains an attachment file named c003c59ea2e.zip do not open it. Delete this email immediately. The attachment contained in the email is an executable file that will infect the computer with ransomware once executed.

The attached file is a malicious exploit that will install ransomware on your computer once it has been downloaded and executed. The file is disguised as a legitimate and working Microsoft file that has been compressed into a zip file; However, the zip file contains no readable text or content.

Once the malware is executed it will encrypt your computer files, give them a new extension name, leave ransom notes on your computer in .txt and .html files, and sometimes change your desktop background to a ransom note.

The ransomware will demand a payment in order to decrypt your files. It is not recommended to pay for the decryptor. Instead, experts suggest to use reputable tools to recover your files and remove the malware from your computer.

Example

Cancellation
From Nathan Kaufman
Priority Normal
c003c59ea2e.zip
Dear [your name],

Attached is the paper concerning with the cancellation of your current credit card.

Confirm to us for receiving.

King regards,
Nathan Kaufman
Account Manager
(ID: 6a2f8e773164f684d02084d395c86257929b)


Add a comment