Users of Allegro are more frequently becoming targets of attacks. Newest of them, apart from typical phishing attempts, includes one in which scammers are impersonating Allegro staff.

The victim is convinced that it was granted a refund of PLN 1000 if a form of a voucher, as part of Allegro’s “policy”.

Here’s the content of the email:
“Hello (recipient’s address here)
In accordance with our policy we have granted you a refund in a form of a voucher for PLN 1000 to be spent in Allegro website.
Your coupon is in the attachment!
We are waiting for you!”

“Voucher” can be found in the attachment for the message. According to Zaufana Trzecia Strona, it contains a Trojan horse njRAT or Bladabindi. The site warns that it’s a campaign aimed at particular victims.