Email from SFA - DO NOT OPEN! - TA specific - Tartan Army Message Board Jump to content

Email from SFA - DO NOT OPEN!


killiesons

Recommended Posts

  • Replies 121
  • Created
  • Last Reply

Top Posters In This Topic

Top Posters In This Topic

Posted Images

Seems the SFA's security is as good as our campaign hopes.

Anyone else received an email this morning about an invoice? Attachment is a virus file from what I can see so don't open if so.

 

'

Dear Customer,

Please find attached invoice INV-01951 (Amended) for 170.00 GBP.

This invoice was sent too early in error. The payment date should be 7th December 2016. 
Kindly accept our apologies for the oversight and for any inconvenience caused.

The amount outstanding of 170.00 GBP is due on 07 Dec 2016.

View and pay your bill: https://in.xero.com/DiQYGarIFcGWFWzDbmAjwLvSXCGxbROSN

If you have any questions, please do not hesitate to contact us.

Kind regards,
Accounts Department
Scotland National Team
T +44 (0) 212 8973157'

 

 

 

 

Link to comment
Share on other sites

Just received an e-mail from the "SSC" claiming i owe £170 and to open an invoice.. 

Me thinks it's a spam so just be aware that its out there..

Mark. 

Edit now 2... 

Edited by Mark frae Crieff
Link to comment
Share on other sites

DO NOT OPEN THE LINK WITHIN THE LATEST SFA EMAIL

I just received the email below;  it's a scam.  You don't owe money.   It downloads a zip file which contains an obfuscated javascript file that'll likely infect your computer, encrypt your files or worse. 

6ie9iWF.png

Best thing to do is just delete it and forget about it.   Be weary though. 

 

I would presume if other SSC members get it, then their system has been hacked and our details are probably in the hands of criminals.   

Link to comment
Share on other sites

That's 3 in quick succession, 2 from the Scotland Supporters Club & 1 from the Scotland National Team :lol:.  

Email is a standard spam email.

Quote
Dear Customer,

Please find attached invoice INV-01951 (Amended) for 170.00 GBP.

This invoice was sent too early in error. The payment date should be 7th December 2016. 
Kindly accept our apologies for the oversight and for any inconvenience caused.

The amount outstanding of 170.00 GBP is due on 07 Dec 2016.

View and pay your bill: dodgy link removed

If you have any questions, please do not hesitate to contact us.

Kind regards,
Accounts Department
Scotland Supporters Club
T +44 (0) 212 8973157
Link to comment
Share on other sites

3 minutes ago, Mark frae Crieff said:

Has the SSC been hacked? 

 

I've received 3, 2 "from" the SSC, one "from" the National Team.

 

Is a phishing exercise and looks like the SSC database of members E-Mail details has been hacked.

Edited by SteveMcD
Link to comment
Share on other sites

Anyone get one of these? It went to the email address I use for SSC emails rather than my usual one so it looks as if the SSC database has been hacked (I've not bought anything from the SSC for a good while). There was a dodgy looking hyperlink which I didn't click.

Dear Customer,

Please find attached invoice INV-01951 (Amended) for 170.00 GBP.

This invoice was sent too early in error. The payment date should be 7th December 2016.
Kindly accept our apologies for the oversight and for any inconvenience caused.

The amount outstanding of 170.00 GBP is due on 07 Dec 2016.

View and pay your bill:


If you have any questions, please do not hesitate to contact us.

Kind regards,
Accounts Department

Scotland Supporters Club
T +44 (0) 212 8973157

 

Link to comment
Share on other sites

Only 2 from 54 antivirus programs detected this is a dodgy file and all the AV signatures are the very latest.  

The SFA will have some explaining to do if anyone gets infected with this.   The "HEUR_JSRANSOM.O2" tells me it's ransomware which encrypts all your files and asks for BitCoins for the unlock key.  

You could be £000s out of pocket if infected. 

38Sk6do.png 

Link to comment
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

Loading...



×
×
  • Create New...