'Google Pay' Email Virus

Cybercriminals often rely on phishing emails to propagate the latest piece of malware in their arsenal. Usually, these emails claim to contain a vital file attachment such as a CV, job offer, tax return or information about a pending delivery. However, a new tactic is using a slightly different strategy – users receive a fake Google Pay invoice that is worth over a hundred dollars. Of course, the users never have authorized such a payment, so they try to review the downloadable invoice to learn more about the unknown transaction immediately. However, instead of a legitimate document, the will end up downloading a macro-laced file designed with the purpose of deploying malware on their systems.

The newly identified 'Google Pay' email virus has been received by hundreds of users worldwide, and cybersecurity experts have determined that it is used to propagate a new infostealer known as Taurus. Users who are infected by this threat might not notice anything strange because the Taurus Stealer will operate silently to extract valuable information from the infected host. If this attack is not caught on time, Taurus might be able to collect login credentials, files, saved passwords, payment information and more.

If you see an unexpected 'Google Pay' email in your inbox, then we advise you to be careful. Instead of clicking any of the links found in the email, load Google Play through your Google account and check for the invoice there – if you find nothing, then it is certain that you have become one of the targets of the 'Google Pay' Email Virus.