The e-ticket email below, which appeared as if it came from Qantas Spirit of Australia airline, contains a malicious attachment. The email was not sent from Qantas and is only a spoofed email designed to trick the recipients into opening the malicious attachment that is disguised an Acrobat Reader PDF E-Ticket itinerary receipt.
The Malicious Email: "Qantas Departure Information"
Subject: Qantas Departure Information - 405F9F YUV BIN 3UE
From: hoardereh700 @ yourbooking.qantas.com.au
Attachment: ???-e-ticket-??zip
Dear,
Thank you for choosing to fly with Qantas.
Attached to this e-mail you will find your E-Ticket Itinerary Receipt and the Terms and Conditions of Carriage. Each passenger travelling is required to carry a printed copy of the E-Ticket document for check-in, immigration, customs, airport security checks and duty free purchases at the airport.
We have also provided some information below to help you prepare for the first flight of your journey. Flight details for all flights in your itinerary are included in your E-Ticket Itinerary Receipt attached.
Baggage
The amount of baggage you can take on each flight depends on your destination and aircraft type View carry-on baggage or checked baggage information for the lastest details on baggage allowances.
Check-in
Refer to your E-Tickert Itinerary Receipt attached or the check-in page for check in times for your flight.
Online Check-in is the easiest and fastest way to check in, providing you a quicker airport experience with dedicated Online Check-in counters. Check in online between 24 hours and 2 hours before your scheduled departure.
Visa & Health Information
Obtain a report on visa and health requirements to determine the visas and vaccinations required for each of the countries yourre visiting.
Visit qantas.com/yourhealthinflight for information on inflight health issues.
The malicious attachment is a Zip file (.zip) or a compressed file. A few years ago, virus writers would zip their malicious programs because this helped prevented antivirus software from detecting these malicious programs.
But, modern antivirus software are able to read the contents of a Zip file and will detect a virus if there is one embedded in it.
If you receive a Zip file, a file ending with .zip, please do not open it unless you are expecting it. If you unzip the file and it contains a file ending with the extensions listed here, please do not open the it.
If you have already attempted to open this file, please scan your computer with the antivirus software installed on it.