- Popular
- Most Commented

Online Threat Alerts (OTA)

An anti-cybercrime community alerting you to scams and frauds.

Do Not Open Unexpected Email Attachments From Known or Unknown Sources

3
3
2,918
2

May. 28, 2016 2016-05-28T18:42:13-05:00
Nov. 10, 2017 2017-11-10T09:57:16-05:00

Online Threat Alerts (OTA)

Do not open unexpected email attachments from known or unknown sources. A malicious e-mail attachment is one of the oldest, most effective, and easiest methods of infecting a computer. Always check the file extension of an e-mail attachment, because cyber-criminals can disguise a malicious attachment as a Microsoft Word document, PDF document, or other legitimate documents. Attachments ending with ".zip" or ".rar" are compressed files that should not be open if the sender is unknown to you, or you were not expecting the email message.

Advertisements - Continue reading below

Here are the extensions of some e-mail attachments that you should never open regardless of where they came from, even if you were expecting them or not:

Extension --- Description

.JAR -- Java archive
.SCR -- Windows Screen Saver
.BAT -- Batch File Windows
.CMD -- Command Script Windows
.COM -- Command File Windows
.COMMAND -- Terminal Command Mac OS
.CSH -- C Shell Script Mac OS, Linux
.EXE -- Executable Windows
.JSE -- JScript Encoded File Windows
.KSH -- Unix Korn Shell Script Linux
.LNK -- File Shortcut Windows
.MSC -- Microsoft Common Console Document Windows
.MSI -- Windows Installer Package Windows
.MSP -- Windows Installer Patch Windows
.MST -- Windows Installer Setup Transform File Windows
.OSX -- Executable Mac OS
.OUT -- Executable Linux
.PIF -- Program Information File Windows
.PS1 -- Windows PowerShell Cmdlet Windows
.REG -- Registry Data File Windows
.RGS -- Registry Script Windows
.RUN -- Executable Linux
.SHB -- Windows Document Shortcut Windows
.SHS -- Shell Scrap Object Windows
.VB -- VBScript File Windows
.VBE -- VBScript Encoded Script Windows
.VBS -- VBScript File Windows
.VBSCRIPT -- Visual Basic Script Windows
.WS -- Windows Script Windows
.WSF -- Windows Script Windows

Check the comment section below for additional information, share what you know, or ask a question about this article by leaving a comment below. And, to quickly find answers to your questions, use our search engine. Search

Write your comment or view the ones below. +

Save

Was this article helpful?

Advertisements - Continue reading below

Comments, Answers, Reviews or Questions

To protect your privacy, please remove sensitive or identifiable information from your comments, questions, or reviews. Please keep conversations courteous and on-topic.

Comments (3)

September 5, 2016 at 8:39 AM by info

Here is an email with a malicious attachment:

"From: Octavio Scott <Scott.3205@thevear.com.br>

Subject: Credit card receipt

Date: Mon 9/05/16 7:29 AM

Attachment: 3935a0377f9d.zip (11.3 KB)

Dear info,

We are sending you the credit card receipt from yesterday. Please match the card number and amount.

Sincerely yours,

Octavio Scott

Account manager"

July 5, 2016 at 7:48 PM by info

Look out for the following malicious email message:

Subject: Scanned image

Attachment: 05-07-2016_746086513.docm

Image data has been attached to this email.

June 27, 2016 at 11:14 AM by info

Here is another fake email message attempting to trick the recipients into open the malicious zip file:

From: Pat Welch (Welch.5462@thegarage .co)

Sent: Mon 6/27/16 9:01 AM

Attachments: info_scanned_doc_971663.zip (8.3 KB)

Dear info,

The document you requested is attached.

Best regards

Pat Welch

Key Account Manager

Advertisements - Continue reading below

Write Your Comment, Answer, Review or Question

Enter comment, answer, review or question.

Trending Now

Geek Squad Phone Number Scam - Scamming - Fraud

Fraudsters regularly abuse legitimate financial services like PayPal to send fake invoices to trick you into paying or providing credit card information. Common themes include Geek Squad and antivirus subscriptions like Norton. Below is a Geek Squad scam that attempts to trick potential victims into calling scammers. Remember, always independently ...

202 Area Code Scams and Calls - Scamming - Fraud

I have been getting a lot of 202 scam calls over the past few days. It seems scammers are using special technology to spoof the actual phone number of a government agency or call from ZIP code (202 for Washington, D.C., for example). This can trick some people into thinking the caller is from a valid source. ...

Is ryml.me a Scam? Received Parcel SMS Text Message - Questions and Answers

I received the text below, which appears to have been sent from Royal Mail. The link in the text goes to the website ryml.me, which is owned by Royal Mail. But, I want to be sure that the text is not a scam. The text message came from telephone number 769256245. ...

13,344
10

Sunpass Text Scam Lane Tolls Fines and Payments - Scamming - Fraud

Fraudulent Sunpass text messages are circulating on mobile devices like the one below. These scam texts falsely claim to be from Sunpass toll authorities and request your personal information to pay overdue toll violations. Do NOT provide any personal or financial information via these messages. ...

8664466319 PayPal Scam and Fraudulent Email - Spamming - Adware

Scammers are using the telephone number 866-446-6319 to trick potential victims into contacting them. The scammers send out fake PayPal emails to potential victims claiming there is a fraudulent charge on their accounts and ask them to call the fake customer service telephone number for help. If contacted, the scammers will pretend to be PayPal cus ...

Economic Impact Payment Scam Text Messages - Scamming - Fraud

Please beware of "IRS $1,400 Economic Payment" scam texts. I got the $1,400 fraudulent rebate text message below. This clever scam aims to trick victims into handing over sensitive personal and financial information under the pretense of receiving Economic Impact Payment stimulus aid. ...

Brushing Scam in a Red Package - Scamming - Fraud

I got a package from Amazon that I did not order. It was in a red box with a business card that had a QR CODE. I looked at my order history and I didn't see it and I knew I didn't buy it. I called Amazon and they said this is a SCAM and when you scan the QR code the scammers get access to everything in your phone. ...

Ezdrivema Alert Scam - Vehicle Unpaid Toll Bill - Scamming - Fraud

The EZDriveMA alert scam below is a text message scam that targets EZPass users in Massachusetts. The scam involves unsolicited texts that claim to be from EZDriveMA and request payment for unpaid tolls. But, EZDriveMA will never request payment by text and all links associated with EZDriveMA will include www.EZDriveMA.com. ...

Is The $750 Shein Gift Card a Scam? Flash Rewards System - Scamming - Fraud

It seems that the Flash Rewards system is a scam. They have promotional deals that you complete in order to get a gift card. The scam is, they say you must complete X number of deals in a specified timeframe (ie 20 days). It's fast to complete deals, but they don't credit you right away. It may take a week or more to get credited. And, you ...

41,837
10

Samsung Mobile Promo Draw Lottery Scam - Lottery - Donation

There is no "Samsung Mobile Promo Draw" lottery. Therefore, the email message below, which claims that the recipients are lucky winners of the Samsung Mobile Promo Draw, is a scam that is being sent by lottery scammers to their potential victims. Therefore, recipients of the fake email message should not respond to it or follow the instru ...

18,392
166

Microsoft Unusual Sign in Activity Scam Email Message - Scamming - Fraud

The Microsoft Unusual Sign in Activity scam email below, which appears to have been sent from "no-reply@microsoft.com" but has an actual reply email address of unusual.activity@recognized-sec.com, is being sent by scammers or cybercriminals. ...

Type Amen Facebook Posts for Help of Children, Adults or Animals - Facebook - Whatsapp

Beware of deceitful Facebook users who are posting pictures of sick, starving, dead and injured children, adults or animals on Facebook, to trick other Facebook users into commenting on them by typing "Amen," in order to make them popular. This type of activity is another Like-Farming scam, and the photos or videos in them are being used ...

6,914,956
1,017

Advertisements - Continue reading below

This Week's Most Popular

Moonton Account Scam Email Account Setting Modification

I got a Moonton email from donotreply@register-sc.moonton.com claiming someone tried to change my account settings and sent a verification code. The thing is, I do not have an account with any Moonton game. Is this some type of phishing Moonton scam or what? ...

8664466319 PayPal Scam and Fraudulent Email

Brushing Scam in a Red Package

202 Area Code Scams and Calls

Officer Schultz Scam Call - Press One for Concerned Department

Scammers are calling potential victims claiming to be Officer Sarah Schultz from a so-called legal department. The scammers claim their potential victims need to discuss their case and take action. Potential victims are then asked to press one in order to connect to a federal agent. ...

49,386
1,503

Is the MGM Data Settlement a Scam?

I just received the MGM Data Settlement email below. They are cutting me a check for $75. Easy money. Never had a problem with the breach, our data is always available these days unfortunately. You have to be diligent watching your accounts. ...

Economic Impact Payment Scam Text Messages

Is The $750 Shein Gift Card a Scam? Flash Rewards System

41,837
10

Samsung Mobile Promo Draw Lottery Scam

18,392
166

Geek Squad Phone Number Scam

Is ryml.me a Scam? Received Parcel SMS Text Message

13,344
10

PayPal Docusign Scam Email Doc

The fake Docusign email, which claims PayPal customer service sent the recipients a document to review and sign, is a scam. The Docusign email scam is being sent by scammers attempting to trick potential victims into clicking the link in it. The link goes to a fake and phishing PayPal website that steals account credentials, personal, or financial ...

McAfee Scam Invoice and Fraudulent Messages

Scammers are sending McAfee scam invoices like the one below to potential victims. The scammers aim to frighten and trick their potential victims into calling the fake Mcafee customer or technical support telephone number in the email. Therefore, recipients of the fake McAfee are asked to delete it and should not call the fake McAfee technical supp ...

Advertisements - Continue reading below