Spear phishing scam?

dealer_wins

Rather than deleting anything, dont pay email demands for money that you have no idea about and know you dont owe?

mr_fishbulb

dealer_wins wrote: »

Rather than deleting anything, dont pay email demands for money that you have no idea about and know you dont owe?

This particular email campaign isn't about getting someone to pay that debt. It's currently being used to spread a piece of crypto ransomware called Maktub.

If you click on the link in the email, it will attempt to download a dropper to your machine which will then grab a variant of Maktub (which has been slightly changed so your antivirus software won't detect it). This will start encrypting all your files and when it is finished, it will demand payment to decrypt them.

The demand for payment in the email is just a rouse to get the victim to click on the link.