New phishing campaign discovered pretending to be Endesa

The Internet User Security Office (OSI) has warned of a new phishing campaign consisting of sending emails impersonating Endesa, the largest electric utility company in Spain, with the aim of installing malware known as Grandoreiro.

The messages which have been discovered so far informs users that they can download their e-mail invoice as a .zip compressed file, although it is actually an .msi file, an executable that contains malicious code.

In case you have received the email, but not clicked on the link, it is advisable to mark it as junk or spam and delete it from the inbox. If it has been downloaded but not executed, find the file in the downloads folder to delete it.

If it has been executed, the OSI recommends following a series of steps. First, disconnect the device from your home internet so that the malware can’t spread to other devices. Then carry out a thorough scan with the antivirus software. If you are still infected, consider formatting or resetting the computer to disinfect it.

The Internet User Security Office warns that through this malicious file they can steal the personal information of the person from the infected device.

If you receive any unusual emails, always question their origin and legitimacy before downloading or activating attachments.

The post New phishing campaign discovered pretending to be Endesa appeared first on Spain Today – Breaking Spanish News, Sport, and Information.