初回投稿 2018年1月12日
最終更新 2019年3月13日

迷惑メール実例2019とウイルス対策3つ 添付ファイル開いた感染被害

イメージ 1

Windows パソコンを攻撃ターゲットに、ウイルス感染を意図する怪しい 迷惑メール(スパムメール) が不特定多数にバラ撒かれてます。

~ ウイルスメール実例 ~

イメージ 5

イメージ 6

イメージ 4


《 2018年 英語のウイルスメール 》

Document No [数字] / Bill No [数字] / Bill No [数字] / Invoice No [数字] / Receipt No [数字]
{Thank you for using online billing system{Thanks for using electronic billing{Thanks for using internet billing{Thanks for using online billing{Thanks for using online billing system{Thanks for using internet billing system{Thank you for using electronic billing system
{Please find your document attached{Please find your invoice attached{Please find your Bill attached{Please find your Receipt attached
Regards
Unpaid invoice ID:[数字] / Unpaid invoice [ID:[英数字]]
Unpaid invoice # [数字]
Dear Client,
According to the reconciliation of the Department of Finance there are the arrears following your client account totaling in $[数字].[数字] .
We attach the last unpaid invoice #[数字] to this letter and kindly ask you pay it off until Feb 15, 2018.
Please check out the file and do not hesitate to pay off the debt. We look forward to your reasonableness
Receipt Feb-[数字]
{DOC attached{Document attached
Emailing: [英数字] / Emailing: [英数字]_[英字]
Your message is ready to be sent with the following file or link attachments:
[英数字]
Note: To protect against computer viruses, e-mail programs may prevent sending or receiving certain types of file attachments. Check your e-mail security settings to determine how attachments are handled
CPY[数字] / COPY[数字] / CP[数字]
Sent from my Samsung device
Document #[数字] / Your Document #[数字] / Ticket #[数字] / Your Ticket #[数字] / Order #[数字] / Your Order #[数字] / Invoice #[数字] / Payment #[数字] / Payment Invoice #[数字]
Dear Customer,
to read your document please open the attachment and reply as soon as possible.
Kind regards,
[英字] Customer Support
PO_[数字] / Purchase_[数字] / Purchase Order_[数字] / Order_[数字]
Hi Sir,
Please find attached PDF.
Thanks & Regards,
[人名],
Network Administrator
documents copy / Copy / PP Copy
promo_[数字] / offer_[数字]
Voice Message from Outside Caller ([数字]m [数字]s)
Voice Message Arrived on Tue, 03 Apr 2018 [数字]:[数字]:[数字] +[数字]
Name: Outside Caller
Number: Unavailable
Duration: [数字]m [数字]s
[英字] SV9100 InMail
Photo from [人名]
Re: Payment
Dear ,
Please find attached payment advice for your reference.
Thanks N Regards,
C H Chong
Re:Invoice
Dear sir,
Pls find attachment here with our due invoice and confirm the bank account detail so we can proceed to Payment
TNT Express Consignment Notification for 213596003
Dear Customer,
A shipment has been arranged for you via TNT.
The shipment is scheduled for delivery today august 29th, 2018 and has TNT consignment number: 213596003.
SHIPMENT DETAILS OVERVIEW: (View Enclosed)
Business Inquiry
Dear Sir/Madam,
We are a USA based company interested in your product.
I'm writing to you after seeing your catalog.
We want to purchase this items like in the attachments.
Please quote for us good prices including shipping charges by sea CIF port of New York.
Waiting for quote.
Thank you
Pro-forma Invoice-[数字]
Morning,
Please see attached copy of a invoice.
DOWNLOAD YOUR INVOICE
Thank you for your business!
PURCHASE ORDER
Dear Sir/Madam,
I have been in contact with your company before and now we are planning to purchase the following products attached.
Please make a review of the purchase order and we need the following information to help us make informed decisions in our interest to import
Good Morning,
I have a proposal for you. Please see attached and confirm.
Thanks
Regarding position / Job Application / Hiring / Application / Job
How are you doing?{Good Evening,{Good Morning,{How is your day?{Hey,{How's your day going?{How's it going?{Howdy,{Pleased to meet you{Hiya,{Hi,
My name is [人名] and I'm interested in a position.{My name is [人名] and I'm interested in a job.
I've attached a copy of my resume.{I've attached a copy of my CV.{I have included a copy of my resume
The password is "1234"{Please click here to download my resume.The password for the file is 1234
Looking forward to hearing back from you!{Thank you!{Best regards!
Invoice Attached / Invoice Attached - FINAL NOTICE / Invoice Due / Invoice #[数字]
This is to inform you that there is still an outstanding payment of $[数字]. We would appriciate it if this could be settled no later than the [数字]th.
I have attached the current invoice and the password for the document is: 1234
Invoice for [数字]. 10/08/2018
This email confirms that your goods have been dispatched. Please find attached your Invoice in PDF format. Please note this document will only be sent in electronic form
PAYMENT
Good Day,
Please find the attached payment slip for wire transfer remitted to your bank account. Attached also the corresponding invoices. My colleague is out of office on emergency leave and I am incharge of sales and payment now. Please inform all when you receive payment. Also advise on shipment schedule for our previous order
Important / Contract
We have been trying to make contact with you with regard to the past 3 weeks by email, This will be the final letter sent to you before action is used{We have been trying to communicate with you regarding the previous 3 weeks by e-mail, This will certainly be the last notification mailed to you before action is taken
File pass word is: 1234{Document password is: 1234
You have to respond and let us know if you would like to proceed.{You have to answer and let us know if you would like to continue.
banking update
Confirm if these are the proper financial details, I have a transaction payable to your business for the past 3 months and every time We tried to post it would reverse back from your financial institution.
Document code is: 1234

《 2019年 英語のウイルスメール 》

You are my love! / Wrote this letter for you / This is my love letter to you / Just for you! / My love letter for you / Always thinking about you / Please read and reply / Felt in love with you!
:) ;) :D :* 8) 8-) :-) :-D ;-) ;D ;* :-*
Up to date emergency exit map
Hi All,
Please find below the Up to date emergency exit map.
Please see Emergency exit map in the attachment..
Yui Aragaki ;) Aya Ueto ;) Yuriko Yoshitaka ;) Erika Toda ;) Maki Horikita ;) Erika Sawajiri ;) Kyoko Fukada ;) Nozomi Sasaki ;) Hikaru Utada ;) Namie Amuro ;) Kyary Pamyu Pamyu ;) Ayumi Hamasaki ;) Sheena Ringo ;) Misia ;)
Love / I love you! / You are my love / My photo for you / My photo / Photo of us / Our photo / Seen this photo? / Take a look please / Do you like it? / Your opinion needed / Just for you / Do you like my photo? / Keep it private!
Scan_Doc_[数字]_pdf
Dear sir,
Kindly provide us your best price for the attached order specification.
Please review our order specification and give us your best FOB price.
Is this you?? / Rate my new photo please! / Our photo / Keep this private / Don't show anyone! / Is this your photo? / Photo of last party / Photo just for you / I love you! / You are my love! / You look so ugly here / You will be shocked!
Ai Hashimoto! Ai Otsuka! Aikawa! Airi Matsui! Akina Nakamori! Alice Hirose! Angela Aki! Aoi Miyazaki! Aya Ueto! Ayaka! Ayame Goriki! Ayumi Hamasaki! Ayumi! Chara! Chihiro Onitsuka! Crystal Kay! Eir Aoi! Emi Hinouchi! Emi Takei! Erika Sawajiri! Erika Toda! Hamasaki! Haruka Ayase! Haruma Miura! Haruna Kawaguchi! Haruna Kojima! Hayashibara! Hibari Misora! Hikaru Utada! Hiroshi Abe! Hiroyuki Sanada! Honoka Miki! Izumi Sakai! Jin Akanishi! Kaela Kimura! Kana Nishino! Kanata Hongo! Kanna Hashimoto! Kasumi Arimura! Kazunari Ninomiya! Keiko Fuji! Keiko Kitagawa! Ken Watanabe! Kento Yamazaki! Kiko Mizuhara! Koichi Domoto! Kumi Koda! Kyary Pamyu! Kyoko Fukada! Maaya Sakamoto! Mai Kuraki! Maki Goto! Maki Horikita! Maki Ohguro! Mao Inoue! Mariya Nishiuchi! Masahiro Nakai! Megumi Hayashibara! Megumi Yamano! Meisa Kuroki! Mika Nakashima! Mikako Tabe! Miki Imai! Miliyah Kato! Minako Honda! Minori Chihara! Mirei Kiritani! Miyuki Nakajima! Mizuki Yamamoto! Momoe Yamaguchi! Namie Amuro! Nana Komatsu! Nana Mizuki! Nanako Matsushima! Nanase Aikawa! Norika Fujiwara! Nozomi Sasaki! Olivia Lufkin! Pamyu! Reina Triendl! Rina Aiuchi! Ringo Sheena! Rinko Kikuchi! Rosa Kato! Ryoko Hirosue! Ryuhei Matsuda! Satomi Ishihara! Satoshi Tsumabuki! Seiko Matsuda! Sho Sakurai! Shota Matsuda! Shun Oguri! Sonny Chiba! Sota Fukushi! Suzu Hirose! Tadanobu Asano! Takayuki Yamada! Takenouchi! Takeru Sato! Takeshi Kaneshiro! Takeshi Kitano! Tatsuya Fujiwara! Thelma Aoyama! Tina Tamashiro! Toma Ikuta! Tomiko Van! Tomohisa Yamashita! Tomomi Itano! Tomomi Kahara! Tsubasa Honda! Wakana Aoi! Yoko Kanno! Yoshitaka! Yu Yamada! Yui Aragaki! Yui! Yukie Nakama! Yumi Matsutoya! Yuriko Yoshitaka! Yutaka Takenouchi!
顔文字
Flu pandemic warning
USA Pharmacy
You should take a look at this announcement!
Right now, influenza activity is critically elevated. US Center for Disease Control and Prevention (CDC) states that within the a last six months, the situation has destabilized noticeably:
件名 UPS Shipment Notification / UPS Express Domestic
The status of your package has changed
Exception Reason: A transportation accident has delayed delivery
Exception Resolution: We've missed the scheduled transfer time. This may cause a delay
The physical parcel may or may not have actually been tendered to UPS for shipment
Scheduled Delivery Date: [曜日], [数字]/[数字]/[数字]
Shipment Details
Tracking Number: [英数字]
Ship To: [人名]
Weight: [数字].[数字] KGS
件名 Tracking Number [数字]
Please check your shipment and contact details below. To track your shipment, click here
Scheduled Delivery Date: [曜日], [数字]/[数字]/[数字]
Shipment number: [数字]
Number of Packages: [数字]
件名 UPS Shipment Notification / UPS Schedule Delivery Update, Tracking Number [英数字]
You have a parcel coming
The physical parcel may or may not have actually been tendered to UPS for shipment
Check the status of your shipment here
Scheduled Delivery Date: [曜日], [数字]/[数字]/[数字]
Shipment Details
Tracking Number: [英数字]
Weight: [数字].[数字] KGS
件名 UPS Shipment Notification
You have a parcel coming
The physical parcel may or may not have actually been tendered to UPS for shipment
Status of your UPS package can be obtained here
UPS shipment tracking
From: [人名]
Tracking Number: [英数字]
件名 UPS Express Domestic
To verify the status of your UPS shipment, please click here.
Scheduled Delivery Date: [曜日], [数字]/[数字]/[数字]
UPS shipment tracking
Shipment number: [英数字]
Weight: [数字].[数字] KGS
件名 Your UPS Invoice is Ready
The physical parcel may or may not have actually been tendered to UPS for shipment
SHIPMENT CONTENTS
Shipment number: [英数字]
From: [人名]
Ship To: (It is necessary to specify the address)
Scheduled Delivery: [数字]/[数字]/[数字]
件名 DHL Shipment Notification
Hi,
The scheduled delivery is Thu [月] [日] 2018 before End of Day.
Please check your shipment and contact details below. If you need to make a change or track your shipment, click here.
DHL shipment tracking
件名 Paid Invoice
I was following up to find out when we can expect payment on the attached invoice. Thanks!
件名 Payment / Pay Invoice
This is the invoice for your new order. Please review this information and confirm this is good to go
件名 Outstanding Invoices
Please open the attached document. This document was digitally sent to you using an HP Digital Sending device
件名 INVOICE # [英字]-[数字]
Attached is INVOICE # [英字]-[数字] from [人名]
件名 [人名] For Check No: [数字]
Good Afternoon,
Invoice is avaible for download
件名 re: Invoice #[数字] / Invoice Problem
Greetings ,
I wasn't lucky enough to reach you by phone recently. Have you payed this invoice below yet? please reply if you haven't or just ignore this letter if you've already did
re: Invoice #[数字]:
件名 INCORRECT INVOICE
Morning
We are waiting for the confirmation from your side so that we can send you the Invoice & Credit card link to process the payment and start the services. If you have any queries, please feel free to contact us. We hope for a positive reply
件名 Purchases 2018
Hi ,
I have checked and re attached all forms required. Please advise if you find any error
件名 Need to send the attachment
Morning
Please refer to the attached copy of the invoice, along with the associated credit card receipt that cover the prepaid shipping and handling charges. Thank you for the opportunity to be of service
件名 tracking number and invoice of your order
Please see attached invoice [数字] for [人名] preprints. It appears this invoice was short-paid by $[数字].[数字]. Can you please look into this?
件名 Emailing: [英数字] [数字]
This is the invoice for your new order. Please review this information and confirm this is good to go
件名 Invoice [数字] / Invoice [数字] from [人名]
Your invoice is attached. Please remit payment at your earliest convenience. Thank you for your business - we appreciate it very much
件名 Awaiting for your confirmation
We now need Invoice.
This correspondence and any files transmitted with it are confidential and intended solely for the use of the intended recipient(s) to whom it is addressed
件名 Payment status
Good Afternoon,
Attached is our invoice #[数字] for the above referenced for purchase order #[数字]. Please feel free to contact us if you have any questions
件名 [英数字]-[数字]
Hi , [メールアドレスの一部]
Lovely talking to you earlier.Please find attached the verti draining invoice for grant purposes. I just have a couple of fertilisings still to charge for but the bulk I have already invoiced
件名 Statement as at [数字].[数字].2018
The registration your invoice: [数字].[数字].2018 is registered, the invoice is being paid by Direct Debit the remaining Balance is $[数字].[数字]
件名 [人名] Past Due invoice
Attached are copies of your electronic invoices from [人名]
件名 Billing Invoice - Job # [数字] / Review invoice required
件名 New payment notice / Activity Alert: Payment with a new address / Activity Alert: Bankofamerica payment notice / Account Alert - Details to update
Dear,
For details of a recent payment made to you, please see the attached payment remittance advice.
You sent a payment of $[数字] to [人名]
If you have any queries or questions, our contact details are printed on the remittance advice
件名 Invoice due, number [数字]
Greetings,
Sending you your invoice below.I am available if you have any questions or concerns at [数字]
件名 Statement & Request for Payment
Please find attached confirmation of our order no. [数字]
Amazon coupon to 50%! / Save up to 50%! - Amazon Cyber Monday
Amazon.com
Cyber Monday Deals Week
Dear client,
As a thank you for being an Amazon customer, we have placed a $[数字] Amazon credit for you. We will automatically apply the balance of your credit to any purchase in the Amazon only on CYBER MONDAY!
Save up to 50%!
Promotional credit expires on November [数字], 2018.
Get your Cyber Monday coupon
[人名] – Sales – Invoice [英数字]
Sorry for the delay
Please submit the new documents as soon as possible.
Missing Documents:
Invoice [英数字] (previous version is attached)
We appreciate your business and look forward to your prompt payment
PayPal Instant payment received
paypal [月] [日], 2018
Transaction ID: [英数字]
Good Afternoon,
You received a payment of $[数字] USD
Thanks for using PayPal. To see all the transaction details, download your PayPal Transaction details file:
Download transaction details online-file
It may take a few moments for this transaction to appear in your account
件名 Amazon order details / Your Amazon.com order... / Amazon.com order payment / Order #[数字]-[数字]-[数字] / Your order [数字]-[数字]-[数字] has shipped
Amazon.com
Your Recommendations | Your Account | Amazon.com
Order Confirmation
Order #[数字]-[数字]-[数字]
Hi ,
Thank you for shopping with us. We confirmation that your item has shipped. Your order details are available on link below. The payment details of your transaction can be found on the order invoice.
Your estimated delivery date is:
Your shipping speed: Standard{Express
Order Details
Payment Summary
Order #[数字]-[数字]-[数字]
Item Subtotal:
Shipping & Handling:
Total Before Tax:
Estimated Tax:
Order Total:
To learn more about ordering, go to Ordering from Amazon.com.
 If you want more information or need more assistance, go to Help.
Thank you for shopping with us.
Amazon.com
件名 Invoice, Account: [英数字]
Dear Client,
Please can the attached doc be checked and its the same as a December inv.
You can download view using this link
件名 Re: [任意のタイトル]
Attached is the signed agreement. If you have any questions, please do not hesitate to contact us.{Can you please look into this urgently and advise?{I have finally been sent the new table-form, which is great. I forward it to you.{I have sent the new file in DOC format.{I have sent the policy wording in DOC format.{I meant to send a doc before ,sorry.{Is this one authorised? (Docs in attachment.){Thank you for your email. I have attached all the data.{I'll just await your advise on this one. Documentation is attached.{Here all our documentation for our question.{I am getting very frustrated that after multiple phone calls nobody seems to be able to resolve this issue. Further to our conversationI have forwarded the email.{Confirming the setup is complete now.{Thank you for your business - we appreciate it very much. FireflyFramer
{This email has been scanned by LANserve Email Defence. For more information please visit www.emergingit.com{Message protected by MailGuard: e-mail anti-virus, anti-spam and content filtering.{This email has been checked for viruses by Avast antivirus software

迷惑メールのテーマは、もっともらしい感じで目を留まらせる内容に仕立ててあります。

  • 金銭の支払い請求書 invoice

  • 荷物の配達通知

  • FAXやコピー複合機のデータ受信

  • 有名芸能人の名前、顔文字で釣る写真やラブレター

たいてい数行の短い文章で曖昧な内容で、具体的な情報がメール本文中にほとんど書かれてありません。

見に覚えのないメールを無視しても問題ないか不安に駆られて、確認したい衝動の赴くまま添付ファイルについ手が伸びるよう戦法です。

メールの添付ファイルからウイルス感染の流れ

ウイルスメールで受け取った不正なファイルの種類は?

2017年~の傾向で、特に多い Windows のファイル形式が 2つ あります。

  1. 圧縮アーカイブ … 拡張子 .zip .rar .7z
    └ 中から スクリプトファイル … 拡張子 .js .jse .vbs .wsf

  2. Microsoft Office ファイル … 拡張子 .doc .docm .xls .xlsm
    (マクロウイルス)

古典的な実行ファイル(拡張子 .exe .scr) に注意を払うことは大事だけど、採用される機会は上の2つと比較すると少なくなっている傾向があります。

PDF文書(拡張子 .pdf)、インターネット ショートカット(拡張子 なし) を添付し、このファイルを開いた直後にスクリプトファイルや Microsoft Office ファイルを開くよう仕向けるパターンある

○ Microsoft Excel の標準機能を悪用する Excel Web クエリファイル(拡張子 .iqy) を添付し、ユーザーに開くよう仕向けるパターンある

○ 投入されるファイルは、Mac OS X、Android スマホ、iOS(iPhone/iPad)、ガラケー といった環境ではいっさい動作しない形式なので感染することはなく大丈夫


スクリプトファイルの感染手口は?

ポチポチッとダブルクリックして開いたら攻撃処理が発動する引き金は、スクリプトファイルでも同じです。 メールを開いただけでウイルス感染 はない!

イメージ 3
不正なスクリプトファイル実物

実際にスクリプトファイルを普通に開いた直後の Windows のプロセスの様子は次のようになっていて、外部ネットワークに接続して実行ファイルをダウンロードしてきます。

Windows ユーザーさんに気づかれない裏側で、それがシレッと行われます。

~ ウイルスに感染した瞬間 ~

イメージ 2
wscript.exe の階層に実行ファイル(緑)

この実行ファイルの正体が 身代金型ウイルス(ランサムウェア) ならば、PC 内の文書、写真などが破壊されて開けなくなる症状で初めて異変に気づく悲惨的なパターンでしょう。

  • ランサムウェア GandCrab、GlobeImposter

  • ワーム Phorpiex

  • バックドア Ammyy Admin RAT

  • ネットバンキングウイルス Emotet、Bebloh/Shiotob、Ursnif/Gozi

  • スパイウェア Raccoon Stealer

100%感染防ぐ無料ウイルスメール対策3つ

誰にでも起こりうる人為的ミス ”ヒューマンエラー” はゼッタイに見過ごしてはいけません。

そこで、不正なファイルをうっかり開いても、ウイルス感染攻撃を100%確実に失敗させる効果的な 無料ウイルスメール対策3つ がコレ♪


《1》 スクリプトファイルの無害化

メール攻撃者は スクリプトファイル を開いてもらおうとしてます。

この ファイルの関連付け をあらかじめ変更しておくと、不正なスクリプトファイルを使った手口が100%通用しない Windows PC が誕生します。 <Windows の設定を変更するだけで簡単




《2》 マクロウイルスの対策

Microsoft Office に実装されてるマクロ機能の悪用するファイル、いわゆる マクロウイルス は Microsoft Word と Microsoft Excel のセキュリティ設定を変更することで攻撃を100%無力化できます。 <数分の変更作業だけ




《3》 ファイアウォールの活用

メール攻撃者は、導入されているであろうセキュリティ製品に妨害させないスリ抜けを意図して、Windows の正規プログラム wscript.exe 、 powershell.exe などを悪用して、ウイルス本体をダウンロードしてきます。

これら実行ファイルの外部通信をあらかじめ ファイアウォール でブロック遮断しておくと、ものスゴく安心です。 <無料で使える標準実装の Windows ファイアウォールでもウイルス対策ができる





それこそ、人間に向けた 「怪しいメールを開くな」「不審なファイルを開くな」 といった精神論だけでは意味がなく、ウイルス感染手口に沿う Windows PC に対してのウイルス対策が最強です。

関連するブログ記事