‘Voice Message Attached’ Malware Emails
The original site is no longer online; links go to the Internet Archive copy.
The claim
Subject: Voice Message Attached from 08439801260
Time: Jul 28, 2015 3:08:34 PM
Click attachment to listen to Voice Message
What the fact-checkers found
Inboxes are currently being hit by emails claiming to contain an attached voice message. The attachments do not contain a voice message. Instead, they contain malware.
The versions I have seen so far have the subject line ‘Voice Message Attached from 08439801260’.
The body of the email contains a date and time and instructs you to click an attachment to listen to your voice message.
The attachment is designed to trick you into believing that it contains an innocent.wav audio file when it actually links to a malicious.exe file.
If you open the attachment, it may install malware designed to steal account passwords and other information from your computer. It may also download and install other types of malware such as ransomware.
Details, such as the phone number specified in the subject line and the time and date information, may vary in different versions of the malware emails.
Got a similar message?
Paste it into the detector and see whether it matches a known hoax.
Check a similar messageRelated fact-checks
Browse the archive →AT&T ‘You Have a New Voice Mail’ Malware Email
The message is not from AT&T and the attached file does not contain a missed voicemail. Instead, the attachment harbours a malicious.exe file hidden within a.zip file. Opening the.exe file can install malware on the user’s computer.
Blank ‘Business Card’ Emails Contain JavaScript Malware in Attachment
The attached file does not contain a business card as implied by the subject line. Opening the.zip file reveals a malicious JavaScript (.js) file that, if opened, can download and install malware. Sometimes, even the simplest of tricks can be effective.
Watch Out For “Confirmation Letter Enclosed”; Malware Emails
Malicious emails that claim to have a confirmation letter enclosed are currently being distributed by online criminals. The emails have the subject line “uk_confirmation_ph” followed by a string of random numbers and a PDF file extension.