The Internet users have recently received e-mail messages with false payment requests from unknown group of cybercriminals impersonating as Kruk – a debt collection company.

Experts from the Zaufana Trzecia Strona portal have found that the attack was conducted by a same group that has previously impersonated the polish Social Security Institution (ZUS).

The false payment request calls for payment of debt, and if no payment is made in due time, the “debtor “ must reckon with the fact that the case will end-up in court.

Aside from the fake requests, the e-mail messages included an attachment, containing the RAR file with in reality is an dangerous, executable Trojan.

The Kruk company has confirmed the information about the illegal use of its name by cybercriminals and has published a list of addresses appearing in the sender’s field: windykacj@kruk.pl, ewelinazuber@kruk.pl kruk@biuro.pl, www@biuro.pl, vindicationofincaso@kruksa.pl, debtcollection@kruk.pl, ewelinazuberwindykjacj@kruk.pl, jeerry@gmail.com, windykacji@kruksa.pl.