[{"@context":"https:\/\/schema.org\/","@type":"BlogPosting","@id":"https:\/\/www.perthcomputer-repairs.com.au\/beware-of-contact-forms-from-emails\/#BlogPosting","mainEntityOfPage":"https:\/\/www.perthcomputer-repairs.com.au\/beware-of-contact-forms-from-emails\/","headline":"Beware of Contact Forms from Emails","name":"Beware of Contact Forms from Emails","description":"[et_pb_section fb_built=”1″ _builder_version=”4.16″ _module_preset=”default” global_colors_info=”{}”][et_pb_row _builder_version=”4.16″ _module_preset=”default” global_colors_info=”{}”][et_pb_column type=”4_4″ _builder_version=”4.16″ _module_preset=”default” global_colors_info=”{}”][et_pb_image src=”https:\/\/www.perthcomputer-repairs.com.au\/wp-content\/uploads\/2022\/01\/malware-phishing-header.avif” alt=”computer repairs malware” title_text=”Malware phishing computer repairs” _builder_version=”4.16″ _module_preset=”default” global_colors_info=”{}”][\/et_pb_image][et_pb_text _builder_version=”4.16″ _module_preset=”default” global_colors_info=”{}”] Hackers are duplicating website contact forms and discussion forums from reputable websites and pushing these forms via fake emails to unsuspecting users.\u00a0 These forms are very well made and […]","datePublished":"2022-01-04","dateModified":"2024-01-28","author":{"@type":"Person","@id":"https:\/\/www.perthcomputer-repairs.com.au\/author\/admin\/#Person","name":"Digby Saunders","url":"https:\/\/www.perthcomputer-repairs.com.au\/author\/admin\/","identifier":1,"image":{"@type":"ImageObject","@id":"https:\/\/secure.gravatar.com\/avatar\/07f69ae4be0ac9161acc3896df4c60993f6699394abd5e7edc36c3605e1bbbed?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/07f69ae4be0ac9161acc3896df4c60993f6699394abd5e7edc36c3605e1bbbed?s=96&d=mm&r=g","height":96,"width":96}},"publisher":{"@type":"Person","name":"Digby Saunders","image":{"@type":"ImageObject","@id":"https:\/\/www.perthcomputer-repairs.com.au\/wp-content\/uploads\/2024\/01\/face.jpg","url":"https:\/\/www.perthcomputer-repairs.com.au\/wp-content\/uploads\/2024\/01\/face.jpg","width":600,"height":60}},"image":{"@type":"ImageObject","@id":"https:\/\/www.perthcomputer-repairs.com.au\/wp-content\/uploads\/2022\/01\/fake-plutio-site.avif","url":"https:\/\/www.perthcomputer-repairs.com.au\/wp-content\/uploads\/2022\/01\/fake-plutio-site.avif","height":1080,"width":1600},"url":"https:\/\/www.perthcomputer-repairs.com.au\/beware-of-contact-forms-from-emails\/","about":["Computer Repairs"],"wordCount":2038,"articleBody":"\t\t\t\t\t[et_pb_section fb_built=”1″ _builder_version=”4.16″ _module_preset=”default” global_colors_info=”{}”][et_pb_row _builder_version=”4.16″ _module_preset=”default” global_colors_info=”{}”][et_pb_column type=”4_4″ _builder_version=”4.16″ _module_preset=”default” global_colors_info=”{}”][et_pb_image src=”https:\/\/www.perthcomputer-repairs.com.au\/wp-content\/uploads\/2022\/01\/malware-phishing-header.avif” alt=”computer repairs malware” title_text=”Malware phishing computer repairs” _builder_version=”4.16″ _module_preset=”default” global_colors_info=”{}”][\/et_pb_image][et_pb_text _builder_version=”4.16″ _module_preset=”default” global_colors_info=”{}”]Hackers are duplicating website contact forms and discussion forums from reputable websites and pushing these forms via fake emails to unsuspecting users.\u00a0 These forms are very well made and are used to distribute Excel XLL files that download and install the RedLine password and information-stealing malware.The forms can install malaware\u00a0 which steals data, RedLine can execute commands, download and run further malware, and create screenshots of the active Windows screen.Spamming contact forms and discussion forums This is a widespread campaign targeting many websites using public forums or article comment systems. Some fake emails ( aka phishing ) contain\u00a0 fake websites to host the malicious Excel XLL files used to install the malware.For example, one campaign used the following spam message and a fake website that imitated the legitimate Plutio site.[\/et_pb_text][et_pb_image src=”https:\/\/www.perthcomputer-repairs.com.au\/wp-content\/uploads\/2022\/01\/fake-plutio-site.avif” alt=”Pluto spam form computer repairs” title_text=”Fake email form computer repairs” admin_label=”Image” _builder_version=”4.16″ _module_preset=”default” global_colors_info=”{}”][\/et_pb_image][et_pb_text admin_label=”Text” _builder_version=”4.16″ _module_preset=”default” global_colors_info=”{}”]Other fake emails pretend to be payment reports, requests for advertising, or gift guides with links to malicious XLL files hosted on Google Drive, as shown below.[\/et_pb_text][et_pb_image src=”https:\/\/www.perthcomputer-repairs.com.au\/wp-content\/uploads\/2022\/01\/google-drive.avif” title_text=”google-drive” _builder_version=”4.16″ _module_preset=”default” global_colors_info=”{}”][\/et_pb_image][et_pb_text admin_label=”Text” _builder_version=”4.16″ _module_preset=”default” global_colors_info=”{}”]Abusing Excel XLL filesThese spam emails\u00a0 are designed to execute harmful Excel XLL files that\u00a0 install\u00a0 RedLine malware on your windows computer.An XLL file ( excel link library ) is an add-in code which extends\u00a0 Excel by reading and writing data, importing data from other sources, or creating custom functions to perform various tasks.XLL files are simply a DLL file that includes an ‘xlAutoOpen’ function executed by Microsoft Excel when the add-in is opened.[\/et_pb_text][et_pb_image src=”https:\/\/www.perthcomputer-repairs.com.au\/wp-content\/uploads\/2022\/01\/excel-add-in.avif” title_text=”excel-add-in” _builder_version=”4.16″ _module_preset=”default” global_colors_info=”{}”][\/et_pb_image][et_pb_text _builder_version=”4.23.2″ _module_preset=”default” hover_enabled=”0″ global_colors_info=”{}” sticky_enabled=”0″]Once the malware runs, it will search for\u00a0 data to steal, including credentials and credit cards stored in the Chrome, Edge, Firefox, Brave, and Opera browsers.If you have already been compromised you should assume that your stored passwords are freely available and immediately change them. Any credit card stored will be on-sold.As XLL files are executables, threat actors can use them to perform a variety of malicious behavior on a device. Therefore, you must never open one unless it comes from a trusted source.These files are not generally sent as attachments but instead installed through another program or via your Windows admin.Therefore, if you receive an email or other message distributing these types of files, simply delete the message and report it as spam.To see more of our IT Services c;lick attached link.\u00a0 Click here for\u00a0 more about our Virus Removal\u00a0\u00a0  \u00a0[\/et_pb_text][\/et_pb_column][\/et_pb_row][\/et_pb_section][et_pb_section fb_built=”1″ module_id=”review” _builder_version=”4.21.0″ _module_preset=”default” background_color=”rgba(3,55,104,0.57)” global_colors_info=”{}”][et_pb_row _builder_version=”4.18.0″ _module_preset=”default” global_colors_info=”{}”][et_pb_column type=”4_4″ _builder_version=”4.18.0″ _module_preset=”default” global_colors_info=”{}”][et_pb_text _builder_version=”4.18.0″ _module_preset=”default” header_text_color=”#FFFFFF” header_3_text_color=”#FFFFFF” global_colors_info=”{}”]What our Clients Say[\/et_pb_text][et_pb_code _builder_version=”4.18.0″ _module_preset=”default” global_colors_info=”{}”]             Posted on Google        Leki Wangdi     Trustindex verifies that the original source of the review is Google. Customer friendly with the great service and fixed within no time.         Posted on Google        Sharon Joby     Trustindex verifies that the original source of the review is Google. I called on Sunday for a last-minute repair on my MacBook Air, and the issue was fixed quickly and efficiently. The setup was at the front of the house and a little cluttered, but the quality of service was excellent. He\u2019s quite loud, but very friendly and professional. The price was very reasonable, especially for short-notice service. I would definitely recommend his work.         Posted on Google        Elke Lunn     Trustindex verifies that the original source of the review is Google. Very happy with the prompt service I received from Rigby. My grandson broke the screen on his laptop, which he urgently needed for school. The screen was replaced within hours. The price was reasonable, and the service was very efficient. Thank you!         Posted on Google        Bernadette McEntee Hart     Trustindex verifies that the original source of the review is Google. Digby\u2019s service was excellent. The problems I was experiencing were solved and then some in good time . He was open to answering all my question with understandable language, not geek talk..         Posted on Google        Jack Baker     Trustindex verifies that the original source of the review is Google. Very quick and professional. Will certainly return next time my compy bricks.         Posted on Google        Bronwyn Mutton     Trustindex verifies that the original source of the review is Google. I'm a happy customer! My HD had failed.Digby found parts and repaired it.He then retrieved precious data and copied to a good HD.Helpful, cheerful and a reasonable price         Posted on Google        Daniel Levis     Trustindex verifies that the original source of the review is Google. Digby is an intelligent and fast working man. Digby went above in helping me with my PC which started as a clean install to windows to rewriting the bios due a virus.Highly recommend.         Posted on Google        Loz Cumber     Trustindex verifies that the original source of the review is Google. Perth Computer Repairs Saved My Business!I have an old CNC machine that runs on Windows XP. When the hard drive failed, I also lost access to the obsolete software that operates the machine. I wasn\u2019t in a financial position to replace the CNC\u2014and even if I was, it would\u2019ve taken at least three months to get a new one.Thankfully, I called Digby. He came to my business promptly, clearly explained the recovery process, and outlined the potential risks. Digby managed to recover the hard drive and got my CNC up and running quickly.Since then, he\u2019s also built me a new computer and is helping with other IT-related needs.Thank you, Digby\u2014your expertise and support have been invaluable!         Posted on Google        Anthony Martin     Trustindex verifies that the original source of the review is Google. Digby helped my son rebuild his  computer, with components purchased. He was excellent in this endeavour and not expensive!               [\/et_pb_code][\/et_pb_column][\/et_pb_row][\/et_pb_section][et_pb_section fb_built=”1″ admin_label=”Sektion” module_id=”mail” _builder_version=”4.16″ background_color=”rgba(3,55,104,0.57)” parallax=”on” parallax_method=”off” global_colors_info=”{}”][et_pb_row column_structure=”1_4,1_4,1_2″ admin_label=”Zeile” _builder_version=”4.16″ background_size=”initial” background_position=”top_left” background_repeat=”repeat” global_colors_info=”{}”][et_pb_column type=”1_4″ _builder_version=”4.16″ custom_padding=”|||” global_colors_info=”{}” custom_padding__hover=”|||”][et_pb_text _builder_version=”4.16″ header_font_size=”36px” background_layout=”dark” border_style=”solid” global_colors_info=”{}”]Contact[\/et_pb_text][\/et_pb_column][et_pb_column type=”1_4″ _builder_version=”4.16″ custom_padding=”|||” global_colors_info=”{}” custom_padding__hover=”|||”][et_pb_blurb title=”Address” use_icon=”on” font_icon=”||divi||400″ icon_color=”#ffffff” icon_placement=”left” admin_label=”Informationstext” _builder_version=”4.18.0″ background_layout=”dark” border_style=”solid” global_colors_info=”{}”]126\u00a0 Whatley CrescentMaylands[\/et_pb_blurb][et_pb_blurb title=”Phone” use_icon=”on” font_icon=”||divi||400″ icon_color=”#033768″ icon_placement=”left” admin_label=”Informationstext” _builder_version=”4.16″ background_layout=”dark” border_style=”solid” global_colors_info=”{}”]0405 119 483 [\/et_pb_blurb][et_pb_blurb title=”Mail” use_icon=”on” font_icon=”||divi||400″ icon_color=”#033768″ icon_placement=”left” admin_label=”Informationstext” _builder_version=”4.16″ background_layout=”dark” border_style=”solid” global_colors_info=”{}”]digby@perthcomputer-repairs.com.au[\/et_pb_blurb][\/et_pb_column][et_pb_column type=”1_2″ _builder_version=”4.16″ custom_padding=”|||” global_colors_info=”{}” custom_padding__hover=”|||”][et_pb_contact_form use_spam_service=”on” recaptcha_list=”repairs|repairs-0″ recaptcha_min_score=”0.6″ email=”digby@perthcomputer-repairs.com.au” custom_message=”email address is %%email%%.||et_pb_line_break_holder||My message is %%message%%||et_pb_line_break_holder||My Name is %%name%%” submit_button_text=”Send Message” admin_label=”Kontaktformular” _builder_version=”4.16″ _unique_id=”0cb913ed-4e3a-4f44-a9ab-840c0ef299bd” border_radii=”on|0px|0px|0px|0px” border_style=”solid” input_border_radius=”0″ global_colors_info=”{}”][et_pb_contact_field field_id=”Name” field_title=”Name” _builder_version=”4.16″ global_colors_info=”{}” button_text_size__hover_enabled=”off” button_one_text_size__hover_enabled=”off” button_two_text_size__hover_enabled=”off” button_text_color__hover_enabled=”off” button_one_text_color__hover_enabled=”off” button_two_text_color__hover_enabled=”off” button_border_width__hover_enabled=”off” button_one_border_width__hover_enabled=”off” button_two_border_width__hover_enabled=”off” button_border_color__hover_enabled=”off” button_one_border_color__hover_enabled=”off” button_two_border_color__hover_enabled=”off” button_border_radius__hover_enabled=”off” button_one_border_radius__hover_enabled=”off” button_two_border_radius__hover_enabled=”off” button_letter_spacing__hover_enabled=”off” button_one_letter_spacing__hover_enabled=”off” button_two_letter_spacing__hover_enabled=”off” button_bg_color__hover_enabled=”off” button_one_bg_color__hover_enabled=”off” button_two_bg_color__hover_enabled=”off”][\/et_pb_contact_field][et_pb_contact_field field_id=”Email” field_title=”Email Address” field_type=”email” _builder_version=”4.16″ global_colors_info=”{}” button_text_size__hover_enabled=”off” button_one_text_size__hover_enabled=”off” button_two_text_size__hover_enabled=”off” button_text_color__hover_enabled=”off” button_one_text_color__hover_enabled=”off” button_two_text_color__hover_enabled=”off” button_border_width__hover_enabled=”off” button_one_border_width__hover_enabled=”off” button_two_border_width__hover_enabled=”off” button_border_color__hover_enabled=”off” button_one_border_color__hover_enabled=”off” button_two_border_color__hover_enabled=”off” button_border_radius__hover_enabled=”off” button_one_border_radius__hover_enabled=”off” button_two_border_radius__hover_enabled=”off” button_letter_spacing__hover_enabled=”off” button_one_letter_spacing__hover_enabled=”off” button_two_letter_spacing__hover_enabled=”off” button_bg_color__hover_enabled=”off” button_one_bg_color__hover_enabled=”off” button_two_bg_color__hover_enabled=”off”][\/et_pb_contact_field][et_pb_contact_field field_id=”Message” field_title=”Message” field_type=”text” fullwidth_field=”on” _builder_version=”4.16″ global_colors_info=”{}” button_text_size__hover_enabled=”off” button_one_text_size__hover_enabled=”off” button_two_text_size__hover_enabled=”off” button_text_color__hover_enabled=”off” button_one_text_color__hover_enabled=”off” button_two_text_color__hover_enabled=”off” button_border_width__hover_enabled=”off” button_one_border_width__hover_enabled=”off” button_two_border_width__hover_enabled=”off” button_border_color__hover_enabled=”off” button_one_border_color__hover_enabled=”off” button_two_border_color__hover_enabled=”off” button_border_radius__hover_enabled=”off” button_one_border_radius__hover_enabled=”off” button_two_border_radius__hover_enabled=”off” button_letter_spacing__hover_enabled=”off” button_one_letter_spacing__hover_enabled=”off” button_two_letter_spacing__hover_enabled=”off” button_bg_color__hover_enabled=”off” button_one_bg_color__hover_enabled=”off” button_two_bg_color__hover_enabled=”off”][\/et_pb_contact_field][\/et_pb_contact_form][\/et_pb_column][\/et_pb_row][\/et_pb_section]\t\t\t\t"},{"@context":"https:\/\/schema.org\/","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Beware of Contact Forms from Emails","item":"https:\/\/www.perthcomputer-repairs.com.au\/beware-of-contact-forms-from-emails\/#breadcrumbitem"}]}]