Billions of Gmail and Outlook users warned not to click ‘kiss of death’ button that’s game over for your device and bank
CYBERSECURITY experts have issued a new warning over dangerous hacker malware that could be lurking in your email inbox.
A simple click on the wrong button could get your device infected and you risk all the private information you have on your computer.
The experts at security firm KnowBe4 explained on their blog: “QBot malware seems to be outliving its competitors through innovative new ways to socially engineer victims into helping install it.”
QBot is a form of malicious software that’s been around since 2008.
The latest version is said to combine several tactics to trick victims into downloading it.
Hackers can hide the malware in PDF files that you could accidentally download from a malicious website link sent to you in an email.
If you click the link, a file will download and you’ll be asked to click “open” to reveal a “protected file.”
This is a button you must never click.
Clicking launches a malicious file onto your device.
Experts at Kaspersky previously labeled QBot as a “banking Trojan.”
It’s used to steal your important logins and credentials.
The Kaspersky blog explained: “It allows attackers to mine credentials (logins and passwords) and cookies from browsers, steal correspondence, spy on banking activities, and record keystrokes.
“It can also install other malware (ransomware for example).”
The best thing to do is to keep up-to-date antivirus software on your computer and avoid clicking any suspicious email links or website popups.
HOW TO AVOID A PHISHING SCAM
Always be thorough when checking who the email is from.
Even if it looks official, double-check the email address and look for any spelling mistakes or slight abnormalities in the sender’s email address.
Never feel pressured into opening an attachment and avoid clicking the phrase “enable content.”
You should also be wary of links in emails.
If you’re certain an email you have received is a scam, let your email provider know by clicking on the “Report” button and delete it.