Malicious Email Sent from Account Tied to Colombian Immigration Agency Domain

An unauthorized email attempting to spread malware was sent out from an email account tied to the website of Colombia’s immigration agency in April, the agency has acknowledged.

Distributed from [email protected], the email included an attachment that recipients were instructed to open. If they did not process the “pending” request, the malicious message stated that they “would not be allowed to leave the country.”

Officials in the governmental office of Migración Colombia sent a follow-up email stating that the message was unauthorized and that this email account was not one used by the agency.

“We want to inform you that, after validating the information provided, we can state that it is a fake email, with malicious content, that seeks to generate anxiety among the public,” said the Bogotá-based agency in an email.

The office instructed anyone who got the message to not download the attachment, delate the email, and empty their deleted items folder to avoid contracting any potential malware.

Migración also offered general advice to never respond to emails asking for personal or financial information or click on links within an email from an unknown sender.