Subway UK has revealed that their marketing campaign’s system was hacked, which resulted in malware-ridden phishing emails being sent to customers on Friday.
As of Friday morning, Subway’s customers in the UK began to received emails from ‘Subcard’ about a Subway order that they had supposedly placed. The email included links to documents which claimed to contain the order confirmation details. Once the emails had been analysed it was discovered that they were in fact distributing Excel documents that contained TrickBot malware that would be installed into a device once opened.