'COELECSA' Email Virus

The 'COELECSA' email virus is a spam email that arrived in the inboxes of thousands of users at the start of August 2020. The email seems to target Romanian users, and it delivers a corrupted file attachment that looks like a legitimate Microsoft Office file or archive. However, in reality, it hides the payload of the RemcosRAT, a high-profile threat used to spy on users and collect information from them. The 'COELECSA' email virus is disguised to look like a price inquiry for a product that can be found in the email attachment – users who accept to open the file attachment may be prompted to enable Office Macros to view the document's content. If this permission is granted, the file may execute a macro script designed to initialize the RemcosRAT.

If you have received an unexpected message titled 'New Order ECANDES – August' recently, then you might be one of the users targeted by the 'COELECSA' email virus campaign. The correct way to proceed is to mark the message as spam, report it and then delete it. You should remember that spam emails are one of the favorite malware propagation channels of cybercriminals. You should be very careful when reviewing emails that ask you to download any files, regardless of whether we are talking about a file attachment or a file hosted on an external server. If you ever need to deal with such files, make sure to stay safe by using an up-to-date anti-malware software suite.