Here’s a new variant on malevolent email that I at least haven’t seen before:
Dear user of “Offthekuff.com” mailing system,
Your e-mail account has been temporary disabled because of unauthorized access.
Advanced details can be found in attached file.
Have a good day,
The Offthekuff.com team
Now, obviously, if my email account had been disabled, I wouldn’t be able to log in and see this message. Plus, all the stuff from my webhost is very clearly identifiable as coming from them, and more specifically from their domain. Still, it took me a second because the message is a bit shocking, and it’s not like I’ve never experienced mail issues before.
The attachment is a PIF file, which those of you who don’t remember the Win 3.1/DOS days may not realize is basically a command file for DOS. I didn’t bother looking too closely, but it probably does something pleasant like delete a bunch of files or some such. Many corporate email servers block PIFs because of this.
So consider this a public service warning. You’ve probably heard it often enough to block it out completely, but never open an attachment in email unless you know what it is and why it was sent to you. Don’t be the cause of your PC’s implosion.