Request of Invoice and Delivery, Scam (5-31-18)

The following is a scam in which the scammer is posing as a vendor. The scammer has a malicious attachment with malware. The attachment is posing as a PO for the services which are on the way. The Attachment needs to be opened in order to confirm the receipt. The attachment is loaded with malware and once opened will infect the victim’s machine. This can lead to sensitive data being stolen or locked down.

You can tell this is a scam because the victim had no previous interact with the scammer nor the company they are posing as. If you receive an attachment or link from an email address you are not familiar with, you should be suspicious of the email. The email in the signature is not the same as the address used to send the email. The misspellings (pls) are also giveaways that this email is a scam.

If you have received this email please delete it.
———————————————————————————————————————————————————————

From: somafac@somafaco.com
To: victim@vcu.edu
Cc:
Bcc:
Date: Wed, 30 May 2018 14:10:29 +0800
Subject: Re:Request of Invoice and delivery
Hello Sir

Please see our attached PO for your reference.

Kindly confirm receipt / acceptance of the purchase order by replying to us ASAP and let us know your delivery schedule.

If you have any question, pls feel free to contact us.

Sincerely Yours

Yuuka Mori

Interntional Sales Administration Team
International Sales Division, Sales Department.

Research Engineer

SIGMA KOKI CO.,LTD,

1-19-9, Midori, Sumida-ku, TOKYO, 130-0021 JAPAN

Tel: +81-3-5638-8228 Fax: +81-3-5638-6550

E-mail:y.mori@sigme-koki.com

MALICIOUS ATTACHMENT REMOVED

Comments are closed.