Email pretending to be 'JÁMBOR TÓTH KOLLÁTH & PARTNERS' law firm with a DOCX attachment

A small online shop received an email that impersonated the Hungarian law firm “JÁMBOR TÓTH KOLLÁTH & PARTNERS.” The message claimed to represent a well-known record label and said it was only for “information and coordination,” not a legal claim. It listed supposed website issues (use of images, logos, and disclosures) and attached a Word (.docx) file with “detailed findings.” The sender used a free Gmail address while the signature block displayed the real law firm’s name and office details, creating a false sense of legitimacy and pressuring the recipient to open the file or reply.

What’s different in this version

These traits set this message apart from the usual pattern.

Explicitly impersonates the named Hungarian law firm “JÁMBOR TÓTH KOLLÁTH & PARTNERS”
Uses a Gmail from-address while the signature block shows the real firm’s branding and office details
Claims to represent a well-known brand to add pressure and credibility
States “this is not a legal claim” to lower defenses while urging a response
Pushes a Word (.docx) “evidence” file to be opened

How this scam works

1
Step 1: You get an email that looks like it’s from a law firm about your website content.
2
Step 2: They say it’s only for ‘information and coordination’ and not a legal claim, which lowers your guard.
3
Step 3: They attach a .docx file with ‘evidence’ and ‘recommendations’ and urge you to open it.
4
Step 4: If you open the file, it may ask you to ‘enable content’ or send you to contact the scammers.
5
Step 5: If you reply or call, they may pressure you to share logins, install remote tools, or pay to ‘settle’ the issue.

✓ Do this

Verify the law firm independently: look up their official website yourself and call a number listed there.
Ask for specific page links and a simple PDF summary instead of an editable Word document.
Have a trusted IT person or security tool check any unexpected attachments before opening.
Keep a copy of the email and report it as phishing to your email provider.
If you’re concerned, consult your own lawyer or the real brand through official channels.

✗ Avoid this

Do not open or download unexpected Word documents, especially if asked to ‘enable content.’
Do not reply using the contact details in the email until you verify independently.
Do not share website logins, personal data, or install any software at a stranger’s request.
Do not send money or pay ‘settlement’ or ‘processing’ fees without independent confirmation.

Verbatim excerpts from the scam

Exact lines from emails or messages—searchable text so you can compare wording.

1 Excerpt 1

From: "JÁMBOR TÓTH KOLLÁTH & PARTNERS" <[gmail address]> Subject: Fwd: Visszajelzés kérése az összevetési anyaghoz
2 Excerpt 2

"Ügyvédi iroda ... együttműködő, egyeztető szándékkal keressük meg Önöket, hogy néhány pontot tisztázzunk az oldalon. Üzenetünk tájékoztató és koordinációs célú; nem minősül jogi felszólításnak."
3 Excerpt 3

"További pontosítást igénylő elemek: - Felhasználói képek/hangok és értékelések 'ajánlásként' való megjelenítése - Ügyfél logók/márkajelzések használata, amely hivatalos együttműködés látszatát keltheti - Adatgyűjtés űrlapon/mini-játékon keresztül, jelölések és tájékoztatás hiánya"
4 Excerpt 4

"Csatolt dokumentum (.docx) – összefoglaló részletekkel. Minden tétel rövid leírást és megjegyzést tartalmaz. Szokványos Word-formátum (.docx)."
5 Excerpt 5

Signature block (impersonated): "JÁMBOR TÓTH KOLLÁTH & PARTNERS — Ügyvédi iroda, Miskolc, Magyarország Email: office@jtkpartners[.]com • Telefon: +36 XX XXX XXXX" Note: Display name and signature use the real firm’s identity, but the actual sender is a Gmail account.