The fake and malicious subway subcard emails like the one below that appears to have been sent from subcard@uk-ie.subwaysubcard.eu, is actually sent by Thormailer.com from CREATESEND.COM. Thormailer.com / CREATESEND.COM is a email newsletter software, so it appears it being abused by online scammers.
The subcard@uk-ie.subwaysubcard.eu Scam Email
The link in the fake email goes to a malicious website that asks visitors to download a malicious Microsoft Office Excel document that will infect their computers with viruses and other malware.
The malicious Microsoft Office Excel document contains a password to prevent anti-virus software and anti-malware from detecting the Macro virus or malware in it. But, the malicious document cannot do anything unless the person who downloaded it "Enable Editing" and "Enable Content" from the yellow bar. This is is why it is important that online users never open password-protected Microsoft Office documents, "Enable Editing" and "Enable Content".
The Malicious Microsoft Office Excel Document
Online users who have already opened the malicious document, "Enable Editing" and "Enable Content" are asked to scan their computers with the antivirus software installed on them to remove malware that may have been installed by the malicious Office Excel document.