{"id":1490,"date":"2019-04-06T19:33:39","date_gmt":"2019-04-06T19:33:39","guid":{"rendered":"http:\/\/www.syyhoaxanalyzer.com\/?p=1490"},"modified":"-0001-11-30T00:00:00","modified_gmt":"-0001-11-29T17:00:00","slug":"Fake-Companies-House-'Important-Documents'-Email-Contains-Malware","status":"publish","type":"post","link":"https:\/\/www.syyhoaxanalyzer.com\/?p=1490","title":{"rendered":"Fake Companies House &#8216;Important Documents&#8217; Email Contains Malware"},"content":{"rendered":"<div>\n<p>This email, which purports to be from UK Government department Companies House, supposedly contains important and confidential company documents in an attached file. The email claims that you must scan the attached documents and fax them to a specified number. \u00a0 \u00a0 <\/p>\n<p><script async src=\"\/\/pagead2.googlesyndication.com\/pagead\/js\/adsbygoogle.js\"><\/script><br \/>\n<!-- HS Net Top Content Responsive --><br \/>\n<ins class=\"adsbygoogle\"\n     style=\"display:block\"\n     data-ad-client=\"ca-pub-0355887770822260\"\n     data-ad-slot=\"4870821038\"\n     data-ad-format=\"auto\"><\/ins><br \/>\n<script>\n(adsbygoogle = window.adsbygoogle || []).push({});\n<\/script><\/p>\n<p>The emails appear to come from a genuine .gov.uk address and includes a genuine Companies House phone number. At first glance, it may appear to be a real Companies House notification.<\/p>\n<p>However, the email is not from Companies House and the attachment does not contain company documents as claimed. The email address is spoofed to make it appear legitimate. The \u00a0<a title=\"IMPORTANT - Confidential documents gov.uk CASE_ email with a zip attachment\" href=\"https:\/\/sanesecurity.blogspot.com.au\/2015\/03\/important-confidential-documents-govuk.html\">attachment contains malware<\/a>. If you open the attached .zip file, you will find a malicious .exe file inside. Clicking this .exe file can install the malware on your computer. Once installed, the malware may download further malware that can steal personal and financial information such as account passwords and connect to remote servers operated by online criminals.<\/p>\n<p>Companies House is a \u00a0<a title=\"Companies House - About\" href=\"https:\/\/www.gov.uk\/government\/organisations\/companies-house\/about\">UK government entity<\/a> \u00a0that &#8216;incorporates and dissolves limited companies, registers the information companies are legally required to supply, and makes that information available to the public&#8217;. Thus, at least a few people who own or work for companies in the UK may believe that the email is genuine and inadvertently install malware on their computers.<\/p>\n<p>This campaign is \u00a0<a title=\"Companies House - Report Fraud\" href=\"https:\/\/www.gov.uk\/government\/publications\/reporting-fraud-about-a-company-to-companies-house\/reporting-fraud-to-companies-house#known-fraud-and-scams\">not unprecedented<\/a>. Another malware email, which was hitting inboxes back in 2013, \u00a0<a title=\"Fake Companies House Emails Contain Malware\" href=\"https:\/\/www.hoax-slayer.com\/companies-house-malware-emails.shtml\">also claimed to be from Companies House<\/a>. The earlier version falsely claimed that a complaint had been made against the recipient&#8217;s company and contained malware in an attached file. \u00a0<\/p>\n<p><script async src=\"\/\/pagead2.googlesyndication.com\/pagead\/js\/adsbygoogle.js\"><\/script><br \/>\n<ins class=\"adsbygoogle\"\n     style=\"display:block; text-align:center;\"\n     data-ad-format=\"fluid\"\n     data-ad-layout=\"in-article\"\n     data-ad-client=\"ca-pub-0355887770822260\"\n     data-ad-slot=\"9162856233\"><\/ins><br \/>\n<script>\n     (adsbygoogle = window.adsbygoogle || []).push({});\n<\/script><\/p>\n<p>Be wary of any email that claims to be from Companies House and instructs you to click a link or open an attached file to view documents or supply information. Some of these fraudulent emails may carry malware. Others may be phishing scams designed to trick you into providing personal and financial information to online criminals.<\/p>\n<h3 class=\"noMargin\">Example<\/h3>\n<div class=\"example\"><strong>Subject: MPORTANT &#8211; Confidential documents<\/strong><\/p>\n<p>Company Documents<\/p>\n<p>Case: C8822143<br \/>\nPlease scan attached document and fax it to [removed].<\/p>\n<p>All web filed documents (with the exception of downloaded accounts templates) are available to view \/ download for 10 days after their original submission. Once accepted, these changes will be displayed on the public record. Not yet filing your accounts online? See how easy it is&#8230; For enquiries, please telephone the Service Desk on [removed] or email [removed] This email was sent from a notification-only email address which cannot accept incoming mail. Please do not reply directly to this message.<\/p>\n<p>Yours faithfully<\/p>\n<p>[Name Removed]<br \/>\nSenior Manager<br \/>\nCompanies House<br \/>\n[Removed]@gov.uk<br \/>\nCalls may be monitored or recorded in case we need to check we have carried out your instructions correctly and to help improve our quality of service.<\/p>\n<p> \u00a92014 Companies House. All rights reserved.<\/p>\n<p><em>Attachment: CASE_C8822143.zip contains CASE_C9FD9DSGF0F.exe<\/em><\/p>\n<\/div>\n<div><a href=\"https:\/\/www.hoax-slayer.net\/wp-content\/uploads\/2018\/11\/companies-house-important-documents-malware-1.jpg\" data-rel=\"penci-gallery-image-content\" ><img loading=\"lazy\" decoding=\"async\" data-attachment-id=\"23020\" data-permalink=\"https:\/\/www.hoax-slayer.net\/fake-companies-house-important-documents-email-contains-malware\/companies-house-important-documents-malware-1\/\" data-orig-file=\"https:\/\/www.hoax-slayer.net\/wp-content\/uploads\/2018\/11\/companies-house-important-documents-malware-1.jpg\" data-orig-size=\"600,677\" data-comments-opened=\"1\" data-image-meta=\"{&quot;aperture&quot;:&quot;0&quot;,&quot;credit&quot;:&quot;&quot;,&quot;camera&quot;:&quot;&quot;,&quot;caption&quot;:&quot;&quot;,&quot;created_timestamp&quot;:&quot;0&quot;,&quot;copyright&quot;:&quot;&quot;,&quot;focal_length&quot;:&quot;0&quot;,&quot;iso&quot;:&quot;0&quot;,&quot;shutter_speed&quot;:&quot;0&quot;,&quot;title&quot;:&quot;&quot;,&quot;orientation&quot;:&quot;0&quot;}\" data-image-title=\"companies-house-important-documents-malware-1\" data-image-description=\"\" data-medium-file=\"https:\/\/www.hoax-slayer.net\/wp-content\/uploads\/2018\/11\/companies-house-important-documents-malware-1-266x300.jpg\" data-large-file=\"https:\/\/www.hoax-slayer.net\/wp-content\/uploads\/2018\/11\/companies-house-important-documents-malware-1.jpg\" class=\"aligncenter size-full wp-image-23020\" src=\"https:\/\/www.hoax-slayer.net\/wp-content\/uploads\/2018\/11\/companies-house-important-documents-malware-1.jpg\" alt=\"Companies House Malware\" width=\"600\" height=\"677\" srcset=\"https:\/\/www.hoax-slayer.net\/wp-content\/uploads\/2018\/11\/companies-house-important-documents-malware-1.jpg 600w, https:\/\/www.hoax-slayer.net\/wp-content\/uploads\/2018\/11\/companies-house-important-documents-malware-1-266x300.jpg 266w, https:\/\/www.hoax-slayer.net\/wp-content\/uploads\/2018\/11\/companies-house-important-documents-malware-1-500x564.jpg 500w, https:\/\/www.hoax-slayer.net\/wp-content\/uploads\/2018\/11\/companies-house-important-documents-malware-1-585x660.jpg 585w\" sizes=\"(max-width: 600px) 100vw, 600px\" \/><\/a><\/div>\n<p><\/br><\/br> Original Source : <a href=\"https:\/\/www.hoax-slayer.net\/fake-companies-house-important-documents-email-contains-malware\/\" target=\"_blank\">https:\/\/www.hoax-slayer.net\/fake-companies-house-important-documents-email-contains-malware\/<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>This email, which purports to be from UK Government department Companies House, supposedly contains important and confidential company documents in an attached file. The email claims that you must scan the attached documents and fax them to a specified number. \u00a0 \u00a0 The emails appear to come from a genuine .gov.uk address and includes a [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":6890,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[],"class_list":["post-1490","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-hoax-inggris"],"_links":{"self":[{"href":"https:\/\/www.syyhoaxanalyzer.com\/index.php?rest_route=\/wp\/v2\/posts\/1490"}],"collection":[{"href":"https:\/\/www.syyhoaxanalyzer.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.syyhoaxanalyzer.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.syyhoaxanalyzer.com\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.syyhoaxanalyzer.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=1490"}],"version-history":[{"count":0,"href":"https:\/\/www.syyhoaxanalyzer.com\/index.php?rest_route=\/wp\/v2\/posts\/1490\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.syyhoaxanalyzer.com\/index.php?rest_route=\/wp\/v2\/media\/6890"}],"wp:attachment":[{"href":"https:\/\/www.syyhoaxanalyzer.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=1490"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.syyhoaxanalyzer.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=1490"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.syyhoaxanalyzer.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=1490"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}