Cover-More has published an advisory to warn users about these scams

Apr 17, 2013 22:21 GMT  ·  By

Malicious emails purporting to come from Cover-More, an Australian travel insurance provider, are used by cybercriminals to distribute a piece of malware.

The company has published an advisory to warn users about notifications entitled “Cover-More Travel Insurance Cover (policy number: [random number]).” Apparently originating from [email protected], the emails read something like this:

“Thank you for choosing to travel with Cover-More Travel Insurance. You have chosen to purchase a policy with Australia's most popular travel insurance provider, trusted by over 1,000,000 Australian travellers each year.

Attached is a copy of your Certificate of Insurance along with a copy of the Product Disclosure Statement (PDS), which we encourage you to read. Remember to keep your emergency assistance card with you when travelling and our 24 emergency assistance team are here to help you.”

The .zip file attached to the emails, named “Cover-More Travel Insurance.zip,” hides an executable file that unleashes a piece of malware.

For more tips on how to identify fake Cover-More emails, check out the firm’s advisory.