Subway customers receive 'malware' emails

guest · Dec 12, 2020

Subway customers receive 'malware' emails
December 11, 2020
https://www.bbc.co.uk/news/technology-55279051

Users took to social media to complain about the emails, which claim to be an order confirmation from the fast-food chain and contain links to malware.
The emails also use the victims' names, and appear to come from the chain's Subcard loyalty scheme.

A spokesperson for the company said:

"We are aware of some disruption to our email systems and understand some of our guests have received an unauthorised email."
It apologised for any inconvenience and advised people to delete the email.
Click to expand...

The problem was earlier reported by computer security news site Bleeping Computer, which said it had found a form of malware called TrickBot in the malicious links the email encourages users to click.

Bleeping Computer reports that these documents include an Excel spreadsheet download, which asks users to enable additional features that install the virus.
It is not clear how the attacker accessed the details of customers.
Click to expand...

guest · Dec 12, 2020

Subway marketing system hacked to send TrickBot malware emails
December 12, 2020
https://www.bleepingcomputer.com/ne...ystem-hacked-to-send-trickbot-malware-emails/

Subway UK has disclosed that a hacked system used for marketing campaigns is responsible for the malware-laden phishing emails sent to customers yesterday.

After analyzing these phishing emails, it was discovered that they were distributing malicious Excel documents that would install the latest version of the TrickBot malware.
Even worse, TrickBot may eventually provide access to the Ryuk or Conti ransomware operations.

When we contacted Subway yesterday about this phishing campaign, we received a response that alluded to a 'disruption' of some sort on their email systems.
Click to expand...

Subway confirms a hacked server used in attack
After sending multiple emails to Subway about the 'disruption' seen on their system, the company disclosed that a server responsible for their email campaigns had been hacked to send out the phishing emails.

"Having investigated the matter, we have no evidence that guest accounts have been hacked. However, the system which manages our email campaigns has been compromised, leading to a phishing campaign that involved first name and email. The system does not hold any bank or credit card details."
Subway has also started to send disclosure emails to affected customers that states that the customer's first name and last name were exposed in the attack.
Click to expand...

Log in or Sign up

Subway customers receive 'malware' emails

guest Guest

guest Guest

Log in or Sign up

Subway customers receive 'malware' emails

guest Guest

guest Guest

Useful Searches