American Express Account Alert: Phishing Malware

American Express Account Alert:  IMPORTANT CardMembership Notification pretending to come from American Express <AmericanExpress@welcome.aexp.com> with a link to download a zip attachment which is malware file.

If you follow any of the links in the email, you get a zip file which is actually  downloaded a malicious file.

All of these also have a password stealing component, with the aim of stealing your bank, PayPal or other financial details along with your email or FTP ( web space) log in credentials. Many of them are also designed to specifically steal your Facebook and other social network log in details.

The email looks like:

american Express  

All the alleged senders, companies, names of employees and phone numbers mentioned in the emails are all innocent and are just picked at random. Some of these companies will exist and some won’t. Don’t try to respond by phone or email.