I don’t remember ordering malware from Amazon

I don’t remember ordering malware from Amazon

Is it just us or has there been a deluge of new malware attacks over the past month, delivered using infected email attachments in messages which purport to be from legitimate organisations?

Amazon – or rather emails containing intriguing subject lines such as ‘Your Amazon Order Details’ – appear to be the worst culprit right now. For these emails are not really from the online retail giant. Instead they originate from cyber criminals hoping you will open the attached file and thereby unleash havoc on your own PC – what a lazy (but effective) way to propagate malicious code!

Naturally, the malware you might inadvertently install by opening an infected file threatens to compromise the performance of your machine or, worse still, the security of your personal data.

Besides bogus order updates from Amazon, other variations are also doing the rounds – ‘important notifications’ from HMRC containing PDF attachments and, of course, the traditional fake documentation from all the major banks: Barclays, RBS, HSBC and Lloyds to name but a few.

What can you do to protect yourself?

So if your inbox is full of messages that you were not expecting on subjects you do not recognise, what can you do to avoid falling foul of the hackers? Here is some simple advice that may prevent you compromising your security.

Know your sender  our simple message to you is this – do not open email attachments from unknown senders.

Beware malicious files – invoices and delivery notes from Amazon and other suppliers are designed to tempt you to click. However, most online retailers do not send file attachments with their order updates and Amazon for one have made a statement to this effect in the past month.

Be careful what you download! There is no such thing as a free lunch and ‘freeware’ as well as P2P programs are amongst the biggest culprits. These software applications are frequently bundled with copious amounts of bundled spyware.

Phishing and ID theft. Be especially wary of hyperlinks contained in messages that appear to originate from your bank, building society, telecoms provider, PayPal account etc. A useful tip is to hover your mouse over any such link to reveal whether the URL actually does originates from the website in question.

Update your antivirus – your antivirus software should be set to update at regular intervals and manual checks are always advisable. If you have any questions regarding your own internet security software, please contact us to discuss this matter as a matter of urgency.

Published On: November 24, 2014/By /Categories: All news items, Security, Web Privacy/
Go to Top