Dropbox Phishing Scams and Malware E-Mails – How to Remove and Stop Them

Dropbox Phishing Scams and Malware E-Mails – How to Remove and Stop Them

1 Star2 Stars3 Stars4 Stars5 Stars (No Ratings Yet)

This article has been created in order to help you by explaining what are exactly Dropbox phishing e-mails and how you can block them completely from your computer.

New form of e-mail spam messages has been identified, connected with messages which resemble different reputable companies. One of those companies is Dropbox which is often involved in phishing e-mails that use it’s name to get victims to click on suspicious e-mails in order to become infected via Dropbox malware. In addition to this, the Dropbox e-mails may not all be fake, and most of those may also lead you to the actual Dropbox website where most victims usually download infection files of different malware. In this article we will explain more about how to Identify original from fake Dropbox e-mails and learn how to block the fake ones directly on your e-mail address.

Threat Summary

NameDropbox Malware
TypeDropbox E-mail Threats
Short DescriptionAims to phish for information by leading the victim to fake websites or directly infect computers with malware via JavaScript or infection files.
SymptomsE-mails from Dropbox which do not lead to the actual Dropbox domain or cause browser redirects or downloaded files.
Distribution MethodSpam Emails, Email Attachments, Executable files, JavaScript
Detection Tool See If Your System Has Been Affected by Dropbox Malware


Malware Removal Tool

User ExperienceJoin Our Forum to Discuss Dropbox Malware.

How to Identify Phishing E-mail Scams Spam by Dropbox

Usually most of the phishing e-mails that are sent with relations to Dropbox are masked very cleverly. In one case, the user has seen an e-mail from another user David, claiming a new file has been shared with the targeted victim. The e-mail is very well designed as you see in the image below and it is in the same theme as original Dropbox e-mails appear like:

This particular user, however has checked the web link before actually clicking on it and has established that it leads to a phishing server, located in Denmark, which has nothing in relation to the actual Dropbox web page. Usually such websites aim to phish for information like your password, username in order to login to your dropbox account. From there, the cyber-criminals aim to enter to your e-mail by trying the same password which you have written and in case the password is the same they may also use it to remove your two factor authetication via phone and compromise your other online accounts, such as Facebook, Instagram and even more serious ones, like PayPal, for example, which can be used to shop online in your name plus directly steal your money. This is why, it is strongly adviseable to focus on checking the URLs, which are on those documents, since it may prevent a disaster waiting to happen.

How to Identify Malicious E-mails Related to Dropbox

Besides phishing e-mails there is also another case with Dropbox which has concerned us over the last few months. This case involves using the Dropbox services in malspam (malicious e-mails) messages in attacks, involving malware, primarily ransomware viruses. In one such instance, the e-mail asks from victims to verify via e-mail by clicking on a confirmation link. The verification e-mail is extremely close to the original e-mails for Dropbox account activation as you can see from the comparison below:

When the victim clicks on this e-mail, a redirection immediately takes place, where a malicious JavaScript file is downloaded on the victim PC. If you see a “Jscript Script File” being downloaded, either automatically shut down your computer or stop your internet, since chances are your PC is about to be compromised almost certainly. And if the e-mails lead you to a file that is archived and you do expect a newly shared Dropbox file, we would suggest that you check the file by uploading it on an online file scanner which will check it without you having to activate the file. One such service that checks files is ZipeZip and you can use it to check any files you believe are suspicious before actually opening them.

How to Block Dropbox and Other Spam, Scamming and Phishing E-Mails

In order to stop Dropbox and other Spam e-mail messages, the first thing you should do is download a reputable e-mail managing software, instead of using your original mail vendor online. The main reason for this is that most e-mail managers have an active blacklist which is automatically updated on a daily basis and that list in combination with the features they offer, such as image blocking until you allow it, makes it for the perfect software to have when you open a dangerous e-mail, because you will be able to see it without any risk whatsoever, since some mails can even infect a computer simply by being opened. Here are some reputable e-mail software services which we recommend using:


ProtonMain represents a free and an open-source software which uses it’s custom e-mail, that is encrypted. So besides anonymous mail, based in Switzerland, you also receive the ability to work with it from any computer and even via online applications. The most important feature, realted to these e-mails is that even if attackers know your password, they have to battle with encryption to which only specific devices that you are using have access to. Really legitimate and reuptable service, however you have to create a new e-mail account as a downsite.

eM Client

Often voted the best email client which has support for range of e-mail providers, this service can surely make it so that you wont receive spam messages in the future as well.

Microsoft Outlook

Probably one of the easiest to use services for e-mail, often among companies, the Microsoft Outlook service is the most user friendly of the bunch even though it has had it’s issues over time, Microsoft has made sure that they warn you in case your account has been compromised.

Mozilla Thunderbird

Even though it has less security features than the other software here, Thunderbird is a great tool that aims to help you in a variety of situations, Thunderbird makes sure to remain as secure and as user friendly as possible while offering you fast and simple service.

How to Remove Malware, Compromised Your PC Via Dropbox or Other Phishing E-mails

In case you have already fallen trap to the Dropbox e-mails and the risks that they carry, we would strongly suggest to take defensive measures first and to immediately change all of the web account passwords you have saved or typed on your web browser during and after the time of infection according to your best bet. Make sure you change them from a computer or a smartphone, you believe is safe. In addition to this, we also recommend that you focus following the removal instructions down below in order to remove any malware that may currently be residing on your computer. If you do not know more information about the malware infecting your PC as a result of opening a Dropbox account, experts strongly advise to use an advanced anti-malware software, since such will automatically identify and remove all malicious files and objects created by it and protect your PC against future infections too.


Ventsislav Krastev

Ventsislav has been covering the latest malware, software and newest tech developments at SensorsTechForum for 3 years now. He started out as a network administrator. Having graduated Marketing as well, Ventsislav also has passion for discovery of new shifts and innovations in cybersecurity that become game changers. After studying Value Chain Management and then Network Administration, he found his passion within cybersecrurity and is a strong believer in basic education of every user towards online safety.

More Posts - Website

Follow Me:

Leave a Comment

Your email address will not be published. Required fields are marked *

Time limit is exhausted. Please reload CAPTCHA.

Share on Facebook Share
Share on Twitter Tweet
Share on Google Plus Share
Share on Linkedin Share
Share on Digg Share
Share on Reddit Share
Share on Stumbleupon Share