Is a day without further fraud attempts a day wasted? Cybercriminals come up with new tricks every day to steal data or money. This time their target is Orange customers, but the fraud is unusual
This is a copy of a real invoice. But there is much more to lose here
As experts from CERT Orange Polska write, customers receive e-mails from fraudsters that are very similar to those sent by the Orange operator. Nothing unusual. It turns out that they are a perfect copy of a real message that reached one of the customers. Even the data (customer account number, invoice number and invoice number) were not changed by cybercriminals.
As if that was not enough. All links contained in the email actually lead (as in the original message) to Orange websites. There is also a link to payment. However, there are two differences. On the copy of the invoice, fraudsters pasted a fragment informing about the need to open the attachment. “Find the attached payment invoice. Have you done this yet? Ignore this message,” they added in red font. The fake emails also contained an attachment that was not in the original.
As you can easily guess, this attachment is not an invoice from Orange, but a zip archive. After unpacking it, experts found a VBS file inside it, which is GULoader malware. It’s an inconspicuous little script, but it can cause significant damage. This file allows hackers to send further malicious programs that, for example, steal data and money or take control of the computer.
Experts note that so far the file is detected as a threat only by 7 out of 61 tested antivirus engines. Therefore, it is worth being careful and carefully checking from which e-mail address the message was sent and what type of file is included in the attachment. It is also worth paying attention to whether the message contains correct data and verifying the possible amount to be paid, e.g. in the mobile application before clicking the link or leaving your data anywhere.
Source: Gazeta
Mabel is a talented author and journalist with a passion for all things technology. As an experienced writer for the 247 News Agency, she has established a reputation for her in-depth reporting and expert analysis on the latest developments in the tech industry.
