Malware Warning Over Fake Delta Airlines Receipts

A new malware scam is targeting consumers with airline emails, just in time for the summer travel booking season. Waves of spam emails have have been sent masquerading as Delta Airlines receipts. In reality, they contain malicious software that can steal personal information from computers, according to information security researchers and Lake County prosecutors.

The fake confirmation emails make it look like someone has just booked a ticket using the address to which it is sent.

"However, no transaction actually took place," said Lake County State's Attorney Scott Turk. "The email is designed to scare you into thinking someone bought an airplane ticket using your identity."

This can trigger a panic in recipients of the emails.

If they happen to click too hastily on email's internally embedded links, they will then be redirected to compromised websites containing Microsoft Word documents infected with Hancitor malware.

"Hancitor is a versatile malware frequently used in phishing attacks that specializes initially infecting a PC, and then acting as a bridge for further malware downloads," Turk said, in a warning to consumers.

Heimdal Security, who discovered the scam last month, said the emails have a few clear signs they're fake, including illegitimate email addresses and a lack of flight information.

Check out some examples they provided below.

Fake Delta email:

Authentic Delta email:

» Read more from Heimdal Security's Blog

Top photo: Patch file