It’s tax season so of course we will now be getting tax related email scams. I received an email from eTrader about my tax documents being available on line. This is a very legitimate looking email.

All the links in the email go to etrade.com like they should. The English in the email is perfect. It even includes legitimate links to anti-phishing and anti-scam sections on etrades’ web site. The only clues that this is a scam email is the return address which goes to “investordelivery.com” and the attachment.

The attachment is a zip file. Inside the zip file is an executable file instead of a document. Obviously the payload.

These are things most people would miss so anyone receiving this email that was an eTrade customer would most likely be fooled in to opening it and becoming infected.