Inform your friends, colleagues, users about this camouflaged threat!
Thanks for submitting the message to us for inspection:
It is Ransomware indeed. We tested it with the current RansomSaver version and it was marked as Ransomware..
The Companies House logo is quite catchy. I believe some people will definitely enable the content and get infected.
There is code waiting to run and infect your computer…
The criminals registered a fake domain. It looks very real but it is not !
Don’t forget to have your macro settings Disabled. (Do it for all of your computers)
See below for a short ‘How To’:
When you try to open the document you will be asked to update the Word Fields. Even if you have your Macro settings disabled, you will still get this message:
Do not click the Yes button because there is code hidden to encrypt your files:
When you get this pop up window in your Outlook, please click the “Yes” button to start the update.
Click the “OK button to download files from our web site.
If your Outllook does not automatically exit, please close it yourself.
Start the setup process to update RansomSaver.