Subway customers complain they're being served up phishing emails

Hook on Keyboard
(Image credit: wk1003mike / Shutterstock)

Subway UK has admitted that a hacked server has been sending customers phishing emails. The spam messages supposedly contained information about a Subway order that had been placed by the customer, accompanied by a malicious Excel attachment.

"Having investigated the matter, we have no evidence that guest accounts have been hacked,” a Subway spokesperson told BleepingComputer. “However, the system which manages our email campaigns has been compromised, leading to a phishing campaign that involved first name and email. The system does not hold any bank or credit card details."

Subway went on to reveal that all compromised systems were promptly isolated and sensitive customer data was not accessed. The fast-food company has also sent emails to all the affected customers, informing them that their first and last names were exposed during the phishing attack.

A spam sandwich

It is not currently clear how many Subway customers have been affected but fortunately, there are a few simple steps that victims can take to safeguard their devices. If they did open the malicious Excel document contained within the Subway phishing email, they should first look for a process named 'Windows Problem Reporting' in the Task Manager and terminate it. Then, they should run antivirus software to make sure any malicious programs are removed.

Although phishing campaigns have been commonly employed throughout 2020, the emails used by attackers do not usually come from legitimate company email accounts. This gave the Subway scam an added air of authenticity.

Usually, attackers simply mimic the look and branding of well-known companies when sending phishing emails. Amazon, Adobe, and a host of other organizations have all seen their names leveraged as part of successful phishing campaigns.

Via BleepingComputer

TOPICS
Barclay Ballard

Barclay has been writing about technology for a decade, starting out as a freelancer with ITProPortal covering everything from London’s start-up scene to comparisons of the best cloud storage services.  After that, he spent some time as the managing editor of an online outlet focusing on cloud computing, furthering his interest in virtualization, Big Data, and the Internet of Things. 

Latest in Security
Data leak
Top home hardware firm data leak could see millions of customers affected
Representational image depecting cybersecurity protection
Third-party security issues could be the biggest threat facing your business
A stylized depiction of a padlocked WiFi symbol sitting in the centre of an interlocking vault.
Broadcom warns of worrying security flaws affecting VMware tools
Android Logo
Devious new Android malware uses a Microsoft tool to avoid being spotted
URL phishing
HaveIBeenPwned owner suffers phishing attack that stole his Mailchimp mailing list
Ransomware
Cl0p resurgence drives ransomware attacks to new highs in 2025
Latest in News
Hisense U8 series TV on wall in living room
Hisense announces 2025 mini-LED TV lineup, with screen sizes up to 100 inches – and a surprising smart TV switch
Nintendo Music teaser art
Nintendo Music expands its library with songs from Kirby and the Forgotten Land and Tetris
Opera AI Tabs
Opera's new AI feature brings order to your browser tab chaos
An image of Pro-Ject's Flatten it closed and opened
Pro-Ject’s new vinyl flattener will fix any warped LPs you inadvertently buy on Record Store Day
The iPhone 16 Pro on a grey background
iPhone 17 Pro tipped to get 8K video recording – but I want these 3 video features instead
EA Sports F1 25 promotional image featuring drivers Oscar Piastri, Carlos Sainz and Oliver Bearman.
F1 25 has been officially announced, with this year's entry marking a return for Braking Point and a 'significant overhaul' for My Team mode