{"id":1355,"date":"2019-04-06T19:33:36","date_gmt":"2019-04-06T19:33:36","guid":{"rendered":"http:\/\/www.syyhoaxanalyzer.com\/?p=1355"},"modified":"-0001-11-30T00:00:00","modified_gmt":"-0001-11-29T17:00:00","slug":"DVSA-Receipt-Malware-Email","status":"publish","type":"post","link":"https:\/\/www.syyhoaxanalyzer.com\/?p=1355","title":{"rendered":"DVSA Receipt Malware Email"},"content":{"rendered":"
\n

\"Malware<\/a><\/p>\n

This \u00a0email, which purports to be from the \u00a0Fixed Penalty Office at \u00a0the UK’s Driver and Vehicle Standards Agency (DVSA), claims that your \u00a0DVSA receipt is included in an attached Microsoft Word document. The email implies that you \u00a0previously requested that the DVSA send you this receipt.<\/p>\n

The email includes an address, phone number, and website link for the DVSA \u00a0and tacks on the type of legal and security statement that you might expect to see on a legitimate government message.<\/p>\n

However, the email is not from the DVSA and the attached Word document does not contain a penalty receipt. \u00a0If you attempt to open the Word document, you will be prompted to enable macros, supposedly so that the ‘receipt’ can be securely displayed. \u00a0However, if you do enable macros as requested, the \u00a0malicious macro that \u00a0subsequently runs will \u00a0download and install further malware components.<\/p>\n

The DVSA has published a warning<\/a> about this attack, which notes:<\/p>\n

\n

DVSA is aware that some members of the public have had emails claiming to be from the DVSA Fixed Penalty Office. The emails contain an attachment to a ‘fixed penalty receipt’.<\/em><\/p>\n

DVSA never sends fixed penalty notices to customers by email.<\/em><\/p>\n<\/blockquote>\n

If you receive one of these emails, do not open any attachments or click any links that it contains. Unless you \u00a0have a good knowledge of macros and have a specific reason for using them, it is best to leave them disabled in Microsoft Office.<\/p>\n

If you are unfamiliar \u00a0with macros and their potential dangers, \u00a0 \u00a0please refer to this other Hoax-Slayer article<\/a>, which provides more \u00a0information \u00a0about \u00a0the topic.<\/p>\n