‘BP Fuel Card e-Bill’ Excel Macro Malware Email

This email purports to be from a fuel card provider and claims to contain an e-bill for a BP fuel card in an attached Microsoft Excel file.

However, the email is certainly not from any legitimate fuel card services company and the attachment does not contain a fuel bill. If you do open the attachment, you will be prompted to enable macros, ostensibly so that the ‘bill’ can be correctly displayed.

But, alas, once macros are enabled, a malicious macro can run. The macro can download and install various other kinds of malware. Once installed, this malware can steal sensitive information such as passwords and allow criminals to access and control the infected computer.

If you receive one of these emails, do not open any attachments or click any links that it contains. And, unless you have a specific reason for using macros, it is best to leave them disabled in Microsoft Office.

If you are unfamiliar with macros and their potential dangers, please refer to this other Hoax-Slayer article, which provides more information about the topic.