Fake emails are sent from servers located outside the country, enabling messages to be sent from any address—one that only appears to be authentic but is in fact merely a so-called spoofing service.
Among the subject lines used are, among others, payment notification or a request to confirm receipt of payment.
To an unsuspecting person, the message may look authentic; in reality, the attachment contains malware designed to intercept sensitive data, such as login credentials and passwords for electronic banking services.
Polish National Police Headquarters:
Therefore, customers should exercise particular caution when using email. Attachments to emails sent by someone previously unknown and outside their contact list should not be opened. If such a message is received, its content should be assessed rationally by checking whether it corresponds to actual activities, such as making a purchase or selling a product.