If you’ve got an email in your inbox from the World Health Organization offering “information and prevention” tips about Ebola, don’t click on its attachment – you’re likely to end up with a nasty digital infection.

Cybercriminals are using the current Ebola outbreak as a topical hook for spam emails that can install malware giving them remote access to computers, including logging key presses, capturing video from webcams and stealing passwords. Online Security firm Trustwave’s SpiderLabs team of ethical hackers published details of the scam, noting that emails pretend to be from the World Health Organization.