Online Threat Alerts (OTA) - Alerting you to scams and frauds.
Virus - Malware - Spyware
The fake and malicious subway subcard emails like the one below that appears to have been sent from subcard@uk-ie.subwaysubcard.eu, is actually sent by Thormailer.com from CREATESEND.COM. Thormailer.com / CREATESEND.COM is a email newsletter software, so it appears it being abused by online scammers.
The link in the fake email goes to a malicious website that asks visitors to download a malicious Microsoft Office Excel document that will infect their computers with viruses and other malware.
The malicious Microsoft Office Excel document contains a password to prevent anti-virus software and anti-malware from detecting the Macro virus or malware in it. But, the malicious document cannot do anything unless the person who downloaded it "Enable Editing" and "Enable Content" from the yellow bar. This is is why it is important that online users never open password-protected Microsoft Office documents, "Enable Editing" and "Enable Content".
Online users who have already opened the malicious document, "Enable Editing" and "Enable Content" are asked to scan their computers with the antivirus software installed on them to remove malware that may have been installed by the malicious Office Excel document.
1
I received this email on my iPhone. I clicked on the link it appeared just as shown above but it didn't display as an Excel document. Consequently it didn't display the yellow bar with 'Enable Content'. So I didn't click on anything else just screen shotted it and deleted the email. 3 days later someone apparently using our Paypal account (according to the bank) made two online purchases amounting to about £200. Is it possible that this is due to this link although I didn't knowingly enable it? I have reset my iPhone but couldn't find a back up dated prior to this phishing attack. What can I do to protect my iPhone? We have already cancelled all cards and blocked our online banking services but it is the iPhones security I am concerned about, moving forward. Please can someone advise me on the best course of action Thanks Richard