New Email Scam - "Law Abiding Citizen"

[Kingy]

I know most will just delete these, but having seen someone ask if this email has any authenticity on another forum, and with this warning being sent by the Derbyshire Police due to it's success I thought I'd share ....

Quote:Fraudsters are sending out a high volume of phishing emails to personal and business email addresses, pretending to come from various email addresses, which have been compromised.
 
The subject line contains the recipient’s name, and the main body of text is as below:
 
“Hi, [name]!
 
I am disturbing you for a very serious reason. Although we are not familiar, but I have significant amount of individual info concerning you. The thing is that, most likely mistakenly, the data of your account has been emailed to me. 
 
For instance, your address is:
 
[real home address]
 
I am a law-abiding citizen, so I decided to personal data may have been hacked. I attached the file – [surname].dot that I received, that you could explore what info has become obtainable for scammers. File password is – 2811
 
Best Wishes,”
 
The emails include an attachment – a ‘.dot’ file usually titled with the recipient’s name.
 
 
This attachment is thought to contain the Banking Trojan Ursniff/Gozi, hidden within an image in the document. The Ursniff Banking Trojan attempts to obtain sensitive data from victims, such as banking credentials and passwords. The data is subsequently used by criminals for monetary gain.

[FraserG]

We got emailed that at work yesterday - seems like it's catching a few people out. One thing you can do to protect yourselves is to disable javascript from running in PDFs (usually disabled by default but worth checking) and obviously not downloading any attachments from any email regardless of whether you trust the person (accounts can be compromised or spoofed to look like they're coming from a legitimate sender). If you aren't expecting an email, contact the person by another means to confirm they've sent you an attachment (Facebook (eugh), phone, etc.) before opening it.

Some mail clients are better than others at detecting spoofing, but they're not all 100% going to work, so vigilance is important.

[jollyjoiner]

I just delete them all and then end up looking for the ones that I should have kept lol