An email with the subject of Company Complaint pretending to come from Companies House but actually coming from a look-a-like domain Companies House <Web.Fillings@companieshousecomplaint.co.uk> with a malicious word doc attachment is today’s latest spoof of a well known company, bank or public authority delivering a banking Trojan which will either be Trickbot, dridex or Emotet banking Trojans. All of which show similar activity in a Payload Security report. They are using email addresses and subjects that will scare or entice a user to read the email and open the attachment. A very high proportion are being targeted at small and medium size businesses, with the hope of getting a better response than they do from consumers.
Remember many email clients, especially on a mobile phone or tablet, only show the Name in the From: and not the bit in <domain.com >. That is why these scams and phishes work so well. For more information visit https://myonlinesecurity.co.uk/another-fake-companies-house-complaint-malspam-delivering-a-banking-trojan/