This email supposedly contains an attached copy of your payment summary for the 2014/15 financial year.
It is apparently aimed at people working in the health sector and claims to be from Recruitment and Employee Transactional Services at HealthShare NSW. It includes links to HealthShare NSW and to the Australian Taxation Office (ATO).
However, the email is not legitimate and the attached file does not contain a payment summary.
Instead, the attached .zip file contains a malicious executable file that, if opened, can install malware on your computer. The exact type of malware payload may vary. Typically, however, such malware can download further malware components, steal sensitive information, and allow criminals to access and control the infected computer.
The email capitalises on the fact that many Australians may currently be in the process of preparing their tax returns. Thus, recipients, especially if they are busy or distracted, may open the attached file without due caution.
If you receive one of these emails, do not click any links or open any attachments that it contains.
Example
Please find attached a copy of your 2014/15 Payment Summary (Group Certificate).
Note: You will receive a separate payment summary for each Health Agency you worked for during the 2014/15 financial year. Payment Summaries are also available in Employee Self Service.
Further information, including fact sheets: http://www.healthshare.nsw.gov.au/paymentsummaries
For taxation advice and information, visit www.ato.gov.au
Thank you,
Recruitment and Employee Transactional Services
HealthShare NSW
This message is intended for the addressee named and may contain confidential information. If you are not the intended recipient, please delete it and notify the sender.
Views expressed in this message are those of the individual sender, and are not necessarily the views of NSW Health or any of its entities.
Attached .zip file: PAYG-EoY-2014-15-81024295-487883705.zip Contains: EoY-2014-15-04831806-000718002.scr
Original Source : https://www.hoax-slayer.net/fake-payment-summary-malware-email-targets-australian-taxpayers/