MX Lab, http://www.mxlab.eu, started to intercept a new trojan distribution campaign by email with the subject “HMRC Employer Alerts & Verification”.
This email is send from the spoofed address “HMRC <employers@alerts.hmrc.gov.uk>” and has the following body:
Thank you for your registration details which have been recorded for email alerts purposes only.
We expect to send you three email alerts a year – February, May and December.
These will give you the links to the latest Employer Bulletin and HMRC PAYE Tools (previously the Employer CD-ROM).Please complete all relevant sections of the attached application form and attach the appropriate documents to confirm your identity.
** Do not reply to this email as this mailbox is unmonitored for incoming mail.
http://blog.mxlab.eu/2013/12/17/fake-hmrc-employer-alerts-verification-email-contains-trojan/