Fake PHS email with attached document virus

Quite professional and convincing-looking (and sounding) email supposedly from PHS, with an attched virus in a Word Doc. First seen 26/10/15.

Its impact may be mitigated somewhat by it including non-working images.

It purports to come fromĀ documents@phsonline.co.uk and reads as follows:

Delivery of new PHS document(s)

Dear Customer

Due to a temporary issue with delivering your document(s) via your online account, please find the attached in DOC format for your convenience.

We apologize for you being unable to view your accounts and documents online in the usual manner. Please note that, in the interim, we will continue to deliver documents in this manner until the issue is fully resolved.


PHS Group

To ensure that you continue receiving our emails, please add documents@phsonline.co.uk to your address book or safe list.

Do not download or open the attachment.

Spread the word: 

Add new comment