Email phishing campaign

At the time of publication, FIN-CSIRT had observed an increase in malicious emails designed to persuade recipients to open a harmful attachment.

The messages commonly referred to an incoming payment, an account statement or a parcel delivery. They could appear to come from familiar addresses belonging to banks or other companies with which recipients did business.

The campaign used a forged From field to impersonate the sender of an email.

Do not open suspicious attachments. If a message raises doubts, verify it through an official channel before taking any action.