Beware of fake phone bills, cybercriminals are impersonating Play’s mobile network, once again.
Fraudsters send “invoices” with a phone bill, the message includes an Excel file, that once activated, installs Zloader malware on the device.

According to CERT Poland, Zloader will then attempt to install the Zeus banking Trojan on the device. Trojan can steal credentials used for your online banking.

The content of the message should raise suspicion in the person that receives it, due to the fact that it does not contain Polish characters, as well as the fact that customers of Play network can find their invoices in the client’s panel on the website or in the application.