I have had 3 or 4 of these type of e-mail all with an attachment

Unity Messaging System subject Voice Message from Unknown (699-556-5579)

Gateway.gov.uk gateway.confirmation @gateway.gov.uk subject Your Online Submission for Reference 485/GB1137936 Could not process

All contained malware virus Win32/TrojanDownloader.Waski.B trojan &
virus Win32/TrojanDownloader.Waski.A trojan
Both files where .exe
Eset says Win32/TrojanDownloader.Waski.A is a trojan which tries to download other malware from the Internet.

When executed, the trojan copies itself into the following location:

%temp%\­miq.exe

All those e-mails where picked up by my e mail service provider, and my security suite Eset smart security

Found this spam list

Edited by tommy45 (Wed 05-Feb-14 16:15:22)

I would even be wary of forwarding to that apparent UK Government Address!

I immediately DELETE the majority, occasionally moving one in to a QUARANTINE Directory - if it looks as though there is a chance of it being genuine - BUT to date over several years, none have proven to be so.

Edited by deleted (Wed 05-Feb-14 16:08:23)

I had a similar one this morning. It is a scam. Don't open the ZIP file. Refer to the HMRC website and navigate to http://www.hmrc.gov.uk/security/examples.htm where they make it clear that the real alert will come out later this month.

I got it too, I get them quite regular, its a scam.

These are so common, from HMRC, FBI, CIA, DoJ, FedEx, Western Union, etc. that they are not worth writing about. Just kill them on sight.

For further info., my 1st PC protected by MS's Security Essential(with latest updates) in XP failed to detect this "Scam" and letting it to go through my Outlook Express 6 unhindered. While my 2nd PC protected by Avast Free has detected this SCAM in the Outlook Express environment and deleted it while it was also warning me! So this demonstrated how USELESS the MS's SE could be!!!!!

MS security essentials is useless , I wouldn't trust avast to detect & remove fully more complex malware, like cryptolocker of what ever it's called

Edited by tommy45 (Thu 06-Feb-14 10:10:12)

Agreed. Logic for always questioning unsolicited e-mails received will be key!!!

I just received another spam e-mail that contained a attachment Reference.zip - Suspicious Object which was deleted by eset looking at the e-mail headers it was sent from an ip that is in the USA but there is also another IP that is in france ?
this e-mail subject was "The submission for reference 5169788 was successfully received" (in several hours time from the time it was sent,lol) and was VAT related, targeting buisnesses it would seem
poporting to be from noreplyAThmrc.gov.uk but had a different reurn path address in the headers, these parasites ain't too clever are they

Edited by tommy45 (Thu 06-Feb-14 12:26:46)

I'm seeing quite a few of these "Successful Receipt of Online Submission" emails being bounced by my mail server at the moment.

In fact it's bounced 90 in the last 48 hours and not delivered any. They seem to have started at about 10am on Tuesday.