‘Vodafone Bill Is Ready’ Malware Email
The original site is no longer online; links go to the Internet Archive copy.
What the fact-checkers found
Vodafone customers should watch out for fraudulent emails claiming that their Vodafone bill is ready. The email links to malware.
The fake message includes the Vodafone logo and is formatted so that it appears at first glance to be a genuine Vodafone notification.
If you click on the “view your bill” link, a.zip file will be downloaded to your computer. The.zip file harbours a malicious JavaScript file that, if opened, can download further malware.
The exact nature of the malware payload may vary. It may be ransomware that can lock up your files and then demand that you pay a fee to online criminals to receive a decryption key. Or, it may be a trojan that can steal bank login credentials or other personal information from the infected computer.
Invoice dates, bill amounts, and other details in the emails can also vary.
If you receive one of these emails, do not click any links or open any attachments that it contains.
Criminals have used similar tactics to target Vodafone customers on several other occasions in recent years.
The Vodafone website includes information about protecting yourself from such scam attempts.
Got a similar message?
Paste it into the detector and see whether it matches a known hoax.
Check a similar messageRelated fact-checks
Browse the archive →Vodafone ‘Bill a Bit More Than Usual’ Malware Emails
This story was first published on November 21, 2013
Fake Vodafone Bill Emails Contain Malware
Inboxes are currently being hammered by ‘bill’ emails purporting to be from mobile phone service provider Vodafone. The brief messages, which are signed by ‘Your Vodafone Team’, contain an invoice number and issue date for a current bill and ask that you pay…
Fake AT&T Bill Emails Point To Malware
The email is not from AT&T and it is not a genuine bill notification. Links in the message open a compromised website that automatically redirects users to other websites that harbour malware in the form of the Blackhole exploit kit.
Fake CargoSmart ‘Sea Waybill Notification’ Email Contains Malware
This email, which purports to be from shipment management software provider CargoSmart, claims to be a sea waybill notification about a recent shipment. The email claims that the Bill of Lading (BL) draft for the supposed shipment is ready for your review.