The email message below, which appears as if came from the Australian Securities and Investments Commission (ASIC), is malicious. The fake and malicious email message was sent by cybercriminals to trick the recipients into clicking on the link within it. Now, clicking the link downloads a .ZIP file that contains a malicious JavaScript (.js) file. If the malicious file is open, it can download and install malware on the recipients’ computers. Therefore, recipients of the same malicious email should delete it and never attempt to click on the link within it.
The Malicious Australian Securities and Investments Commission Email
Subject: Request for ASIC correspondence reprint
Dear Customer,
Thank you for your request to reprint this correspondence
Please select this link to retrieve a copy.
For more information, please visit www.asic.gov.au/question.
Please do not reply to this email as it has been sent from an unattended mailbox.
Regards
Australian Securities and Investments Commission
Please consider the environment before printing this document
Information collected by ASIC may contain personal information. Please refer to our Privacy policy http://www.asic.gov.au/privacy for information about how we handle your personal information, your rights to seek access to and correct personal information, and how to complain about breaches of your privacy by ASIC.
NOTICE
This e-mail and any attachments are intended for the addressee(s) only and may be confidential. They may contain legally privileged or copyright material. You should not read, copy, use or disclose them without authorisation. If you are not the intended recipient please contact the sender as soon as possible by return e-mail and then please delete both messages. This notice should not be removed.
20160831224349
Recipients of the malicious email message, who have already clicked on the link within it, downloaded the malicious .ZIP file and open it, should do a full scan of their computers with the antivirus software installed on them.