CiscoCISCO-THREAT-33903Threat Outbreak Alert: Fake Shipping Documents Attachment Email Messages on June 25, 2014
Medium
Alert ID:
33903
First Published:
2014 April 22 20:16 GMT
Last Updated:
2014 June 26 11:57 GMT
Version:
39
Summary
- Cisco Security has detected significant activity related to spam email messages that claim to contain shipping documents for the recipient. The text in the email message attempts to persuade the recipient to open the attachment to view the documents. However, the .zip attachment contains a malicious .scr file that, when executed, attempts to infect the system with malicious code.
Email messages that are related to this threat (RuleID7930KVR) may contain the following files:
> Shipping Documents.zip
Shipping Documents.scr
March invoice 9090.zip
March invoice.exe
Invoice-04222014.zip
Invoice-04222014.scr
Invoice 015652 March 2014.zip
Invoice 288910 March 2014.exe
IMG_23_04_2014_3282842636.zip
IMG_23_04_2014_0094855483.jpeg.exe
DHL_label_28496.zip
Label_87698_id_2518023.pdf.exe
FAX162340.zip
FAX232014.scr
Invoice 015998 March 2014.zip
Invoice 288915 March 2014.exe
Scan652210960198.ZIP
scan9724GH862.scr
IncomingFax.zip
IncomingFax.scr
PO.zip
PO 5919.exe
Voicemail242014.zip
Voicemail242014.scr
fax.zip
fax.pdf.exe
VOICE834-783-5583.zip
Voice-002-21KB.scr
EMAIL.49634362.91692652.zip
EMAIL.88291128.3889991.exe
EMAIL.59814132.47767294.zip
EMAIL.88291128.3889991.exe
fax_EE7171C8850937715719.zip
fax_40888A4923670516184_25.04.2014-19-32.exe
emailinvoice.1527118.zip
emailinvoice.197291101.exe
Scan112207782115.zip
SCAN8269641296.scr
Accountandaniel.zip
ConfidentialDocs.scr
Chase.jon.zip
Chase Documents.scr
Incident_3494075.zip
Incident-04282014.scr
MISSED VOICE MESSAGE09.WAV.zip
MISSED VOICE MESSAGE09.WAV.exe
MISSED VOICE MESSAGE12.WAV.zip
MISSED VOICE MESSAGE12.WAV.exe
Documents.zip
Documents.scr
MISSED VOICE MESSAGE14.WAV.zip
MISSED VOICE MESSAGE14.WAV.exe
REVICE PROFORMA INVOICE (29-04-2014) FR #8803853 HJK.zip
REVICE PROFORMA INVOICE (29-04-2014) FR #8803853 HJK.exe
FAX_20140430_7560023_45.PDF.zip
FAX_20140430_7560023_45.PDF.exe
PO. 10023.zip
PO. 10023.exe
fax_F997601E23000445134E.zip
fax_2552173833550C621023.exe
Swift.zip
DOC_0011792801291-pdf.exe
ScanReport.zip
SCANRE~1.SCR
voicemail.zip
voicemail504-12.scr
PO#67839.zip
PO#67839.exe
MISSED VOICE MESSAGE05.WAV.zip
MISSED VOICE MESSAGE05.WAV.exe
VoiceMail.scr
MISSED VOICE MESSAGE_07.WAV.zip
MISSED VOICE MESSAGE_07.WAV.exe
Voice Message 412964.scr
Documents.exe
PO. 300178-80.zip
PO. 300178-80.exe
id783048894.pdf.exe
report.zip
FAX-826123.scr
FAX-880568.zip
VoicemailMessage.scr
fax_94241DD5808FC91420F.zip
fax_6B225A5232CC527408.exe
Account_Documents.zip
Account_Documents.scr
Primera Entrega NIT_Suspendidos.zip
Primera Entrega NIT_Suspendidos.exe
invoice_65476859394857_pdf.exe
Report_ID30A1BEE9E89FB.zip
Tax_76483691535948579.elc.exe
Refund-Form-ID_1356038.zip
VOICE754-597-3996.zip
BanklineForm.scr
BanklineForm.zip
Invoice_111916734.exe
Invoice_111916734.zip
Tax_87469412302509234.pdf.exe
Refund-Form-ID_2402331.zip
ptl.zip
PtLGScan.exe
FAX_6291741_7941724.zip
FAX_6291741_7941724.exe
FAX-374174.zip
FAX-856412.scr
chd_did7-888277382-29398128.zip
chd_did7-888277382-29398128.scr
HM Revenue & Customs - TAX.zip
HM Revenue & Customs - TAX.scr
SecureMessage.zip
SecureMessage.scr
VOICE479-446-6489.zip
voice-478-981-324.exe
fax_341182B597386A36074F.zip
fax_449215305424B53361D1.exe
fax_8B59876830178A796484.zip
fax_8B48575278A26635C6.exe
federicabidoli.zip
federicabidoli.exe
fax_80414042929385754350.zip
fax_1B5364CA5925EF7080D7.exe
Scan-001_200522014_092.zip
Scan-001_200522014_092.scr
PO-0376298-pdf.zip
PO-0376298-pdf.exe
LexisNexis_Invoice_05202014.zip
LexisNexis_Invoice_05202014.scr
SecureMessage.zip
SecureMessage.scr
rovida.zip
rovida.exe
Scan_001_210514_283.zip
Scan_001_210514_283.scr
voicemail.exe
fax_2014.05.21_49601244C.zip
fax_2014_05_21_6C968451B9.exe
fax_2014.05.21_7B5940757B.exe
fax_2014-05-21_0790051927.zip
Auto_insurance_and_id_card.zip
Auto_insurance_and_id_card.scr
voice_message_2014-05-26_E49258996E.exe
voice_message_2014_05_26_527615449F.zip
myvideo.scr
myvideo.zip
PO#MPK28330-35.exe
NEW ORDER.zip
Commercial Invoice.scr
Commercial Invoice.zip
fax_C976513521.exe
fax_FC510758E9.zip
Scan_002_28378181_129.scr
Scan_002_28378181_129.zip
Incident_3DSJ667BU539YWU.zip
Incident_1BBWHVO9AR3E263.scr
PO# 355909.zip
PO# 355909.exe
FAX_2957944.zip
FAX_052914.scr
Fax_0529_scanmessage.zip
Fax_0529_scanmessage.zip.scr
scan_001.zip
scan_001.scr
CA2013TaxReturnReport.pdf.zip
CA2013TaxReturnReport.pdf.exe
PO#46474748484_pdf.zip
PO#758584944993.exe
Docs P.O #77010# Order.zip
Docs P.O #77010# Order.exe
PO#1002873 for june.zip
PO#1002873 for june.exe
fax_E65278F53754E510312F.zip
fax_D02873952730D664993D.exe
TaxReturnReport.zip
TaxReturnReport.pdf.exe
reservation_0477389.zip
Booking_invoice_8768343.pdf.exe
09062014DOC.zip
09062014DOC.exe
Important Chase Private Banking Forms.zip
Important Chase Private Banking Forms.scr
revised-PI.zip
scan001.exe
Contract & Shipping Marks (2).zip
Database.scr
PO#811019.zip
PO#811019.exe
PO-74893SD-pdf.zip
PO-74893SD-pdf.exe
Scan.zip
Scan.scr
fax_B2342D2C1212A2423F3E.zip
scan P.O #98578.zip
scan P.O #98578.exe
_Detailed_Document_SN3706.zip
Detailed_Document_ID7723H_June-17_Date_2014.exe
fax_B2342D2C1212A2423F3A.zip
Document.zip
Document.exe
fax_B2342D2C1212A2423F35.zip
fax_B2342D2C1212A2423F36.zip
fax_B2342D2C1212A2423F30.zip
fax.exe
PO 339704710 dated 17.06.2014.zip
PO 339704710 dated 17.06.2014.exe
Vmessage34868.zip
Voice Message_2454250.scr
order_id.zip
order_id_report_89378973489578943758934.exe
order_id.exe
PO Details_pdf.zip
PO Details_pdf.exe
img-324897&Qoutation.pdf.zip
img-324897&Qoutation.pdf.exe
fax_B2342D2C1212A2423F37.zip
fax.scr
PO-ST78489.zip
PO-ST78489.exe
fax_B2342D2C1212A2423F41.zip
fax_B2342D2C1212A2423F42.zip
_
The Shipping Documents.scr file in the Shipping Documents.zip attachment has a file size of 685,056 bytes. The MD5 checksum, which is a unique identifier of the executable, is the following string: 0xD4CB570F31B48D792DAEA95F43A0CCAE
The March invoice.exe file in the March invoice 9090.zip attachment has a file size of 14,336 bytes. The MD5 checksum is the following string: 0xE8D71E567C4782FD4D8315D2953A761D
The Invoice-04222014.scr file in the Invoice-04222014.zip attachment has a file size of 19,968 bytes. The MD5 checksum is the following string: 0x28D4A53893ABA210FED7600CC759CBCD
The Invoice 288910 March 2014.exe in the_ Invoice 015652 March 2014.zip_ file has a file size of 14,848 bytes. The MD5 checksum is the following string: 0xC6AB2D50A7550DCA7D66CE9E535CD991
The IMG_23_04_2014_0094855483.jpeg.exe in the IMG_23_04_2014_3282842636.zip file has an approximate file size of 452,669 bytes. The MD5 checksum is the following string: 4e5e163b89754f0d7e877bd000c0909b
The_ Label_87698_id_2518023.pdf.exe _in the DHL_label_28496.zip file has a file size of 142,336 bytes. The MD5 checksum is the following string: 0x0F31B1848F157E79BE48E8A3DA64B8E2
The _FAX232014.scr _in the _FAX162340.zip _file has a file size of 19,968 bytes. The MD5 checksum is the following string: 0x30E4A395D8B3F01F590A1D936CCD3B90
The Invoice 288915 March 2014.exe in the Invoice 015998 March 2014.zip file has a file size of 15,360 bytes. The MD5 checksum is the following string: 0x2E13885DB04B73AF8A83210125A4C046
The scan9724GH862.scr in the Scan652210960198.ZIP file has a file size of 19,456 bytes. The MD5 checksum is the following string: 0x72C2E862298299EC45A25172584ED73D
The _IncomingFax.scr _in the IncomingFax.zip file has a file size of 19,456 bytes. The MD5 checksum is the following string: 0xB7CE56DDFCA394B809C91EC7772C33B9
The PO 5919.exe file in the PO.zip attachment has a file size of 319,747 bytes. The MD5 checksum is the following string: 0xF1206107552A8D33D4EF27E170CA867A
The Voicemail242014.scr file in the Voicemail242014.zip attachment has a file size of 19,456 bytes. The MD5 checksum is the following string: 0xA1AEEBCDBCEDC62258327D14807246C2
The fax.pdf.exe file in the fax.zip attachment has a file size of 77,824 bytes. The MD5 checksum is the following string: 0x8D035BCFABCBBE5A66EDD3E3A5B985DF
The Voice-002-21KB.scr file in the VOICE834-783-5583.zip attachment has a file size of 19,456 bytes. The MD5 checksum is the following string: 0x4BB40659D25D8E3418DEED7177353A3D
The EMAIL.88291128.3889991.exe in the _EMAIL.49634362.91692652.zi_p file has a file size of 14,848 bytes.The MD5 checksum is the following string: 0xE4AB1EACC1796DB2C9B7BF240D5AE984
The EMAIL.88291128.3889991.exe in the EMAIL.59814132.47767294.zip file has a file size of 14,848 bytes.The MD5 checksum is the following string: 0xDE1EA2B24A70BF540E24368149941DC4
The fax_40888A4923670516184_25.04.2014-19-32.exe in the fax_EE7171C8850937715719.zip file has a file size of 25,104 bytes.The MD5 checksum is the following string: 0x48241B1974670C16513DD97F1ECD15D0
The_ emailinvoice.197291101.exe_ file in the_ emailinvoice.1527118.zip _attachment has a file size of 19,968 bytes. The MD5 checksum is the following string: 0xD1E1AFC0100587C2AB1C03B61EC69CE5
The SCAN8269641296.scr file in the_ Scan112207782115.zip_ attachment has a file size of 42,496 bytes. The MD5 checksum is the following string: 0x96C4F187E12F0E4E7770A993DA8650E6
The ConfidentialDocs.scr file in the Accountandaniel.zip attachment has a file size of 31,744 bytes. The MD5 checksum is the following string: 0x562E67365698261C043E0648B4A7C853
The_ Chase Documents.scr_ file in the _Chase.jon.zip _attachment has a file size of 24,576 bytes. The MD5 checksum is the following string: 0xA75FFFE7BB5FF9B4E948892744EDDCFA
The Incident-04282014.scr file in the Incident_3494075.zip attachment has a file size of 26,624 bytes. The MD5 checksum is the following string:0xD0BC39628D3757D1C3E8B4B35F3F20DF
The MISSED VOICE MESSAGE09.WAV.exe file in the MISSED VOICE MESSAGE09.WAV.zip attachment has a file size of 131,072 bytes. The MD5 checksum is the following string: 0x97AA9AFD697D7A8F21795689F78EB6E1
The MISSED VOICE MESSAGE12.WAV.exe file in the MISSED VOICE MESSAGE12.WAV.zip attachment has a file size of 131,072 bytes. The MD5 checksum is the following string: 0x74041D8476348FA1B526DA80FA45F18D
The Documents.scr file in the Documents.zip attachment has a file size of 19,968 bytes. The MD5 checksum is the following string: 0x2A04CA7CAC3D2914067D2882C4EC0EE8
The MISSED VOICE MESSAGE14.WAV.exe file in the_ MISSED VOICE MESSAGE14.WAV.zip_ attachment has a file size of 92,672 bytes. The MD5 checksum is the following string: 0x667D2AD74EEA3A049FAFA86BE65E0A41
The _e_REVICE PROFORMA INVOICE (29-04-2014) FR #8803853 HJK.exe file in the REVICE PROFORMA INVOICE (29-04-2014) FR #8803853 HJK.zip attachment has a file size of 596,944 bytes. The MD5 checksum is the following string: 0x379D1E7A8C15FEB3571444B6603DA9A4
The FAX_20140430_7560023_45.PDF.exe file in the FAX_20140430_7560023_45.PDF.zip attachment has a file size of 126,976 bytes. The MD5 checksum is the following string: 0x32B1A72D983905AADE06654FDB04E2CC
The PO. 10023.exe file in the PO. 10023.zip attachment has a file size of 251,384 bytes. The MD5 checksum is the following string: 0x04517A558CDC3E951736B6AF09A7C961
The fax_2552173833550C621023.exe in the fax_F997601E23000445134E.zip file has a file size of 77,824 bytes. The MD5 checksum is the following string: 0x5E7FE1178B94C2BD4527D65B08D85F71
The DOC_0011792801291-pdf.exe in the Swift.zip file has a file size of 1,255,871 bytes. The MD5 checksum is the following string: 0x527289AE2D6268D5DB535CC0D9C4C294
The SCANRE~1.SCR in the ScanReport.zip file has a file size of 81,408 bytes.The MD5 checksum is the following string: 0x0C8199DBB2A4EA7185C2F2CFCC1FE154
The voicemail504-12.scr in the voicemail.zip file has a file size of 19,456 bytes.The MD5 checksum is the following string: 0x9632870A0978EAF8ED9EA222B8A1EC73
The PO#67839.exe in the PO#67839.zip file has a file size of 323,528 bytes.The MD5 checksum is the following string: 0x23408394E4F83E9CD3A95CA88C7793C6
The MISSED VOICE MESSAGE05.WAV.exe in the MISSED VOICE MESSAGE05.WAV.zip file has a file size of 126,976 bytes.The MD5 checksum is the following string: 0xC7C44B3D780AC06C6E9F9BB4B84C4EBF
The VoiceMail.scr file in the VoiceMail.zip attachment has a file size of 24,064 bytes. The MD5 checksum is the following string: 0x41101826C840E9A780ADF0FE99C8D897
The MISSED VOICE MESSAGE_07.WAV.exe file in the MISSED VOICE MESSAGE_07.WAV.zip attachment has a file size of 122,880 bytes. The MD5 checksum is the following string: 0xC36C132A33CDBE08204B53390FCECDEA
The_ Voice Message 412964.scr_ file in the voicemail.zip attachment has a file size of 21,504 bytes. The MD5 checksum is the following string: 0xE5D00543C948CC3DDABBCD56E57BAEAE
The _Documents.exe _file in the Documents.zip attachment has a file size of 2,589,696 bytes. The MD5 checksum is the following string: 0x7899523EABF108B4A3738ABD3A30D517
The PO. 300178-80.exe file in the PO. 300178-80.zip attachment has a file size of 267,316 bytes. The MD5 checksum is the following string: 0xF08C119B1B3330CF1F077D2A1E9A0B8A
The id783048894.pdf.exe file in the report.zip attachment has a file size of 73,728 bytes. The MD5 checksum is the following string: 0x9F231DC3847F7706D8171B964E4AACE5
The FAX-826123.scr file in the FAX-880568.zip attachment has a file size of 26,624 bytes. The MD5 checksum is the following string: 0x9878E57C0F0D61A1D3DFE32A7C1F0235
The VoicemailMessage.scr file in the VoiceMail.zip attachment has a file size of 17,920 bytes. The MD5 checksum is the following string: 0xF42CC98D1F21BDCAA9FD74D16015F285
The fax_6B225A5232CC527408.exe file in the fax_94241DD5808FC91420F.zip attachment has an approximate file size of 31,744 bytes. The MD5 checksum is not available.
The Account_Documents.scr file in the Account_Documents.zip attachment has a file size of 15,872 bytes. The MD5 checksum is the following string: 0xF89D06A787094FE2DC1AF6B2C0914C17
The Primera Entrega NIT_Suspendidos.exe file in the Primera Entrega NIT_Suspendidos.zip attachment has a file size of 487,424 bytes. The MD5 checksum is the following string: 0x32E5DC136BFB42746745A480C7FC7A1C
The invoice_65476859394857_pdf.exe file in the Report_ID30A1BEE9E89FB.zip attachment has a file size of 98,304 bytes. The MD5 checksum is the following string: 0x57B83C8E86591DEDD1F7A626BF97EFF9
The Tax_76483691535948579.elc.exe file in the Refund-Form-ID_1356038.zip attachment has a file size of 98,304 bytes. The MD5 checksum is the following string: 0x8C0D8BB7559129410427074745C585AB
A variant of the voicemail.scr file in the VOICE754-597-3996.zip attachment has an approximate file size of 661,504 bytes. The MD5 checksum is not available.
The BanklineForm.scr file in the BanklineForm.zip attachment has a file size of 21,504 bytes. The MD5 checksum is the following string: 0xEDE7BC2A4B057895E95E2B1F302D9CF8
The Invoice_111916734.exe file in the Invoice_111916734.zip attachment has a file size of 90,112 bytes. The MD5 checksum is the following string: 0x2629FF23A72927113EB4FDA4BBAEF9D5
The Tax_87469412302509234.pdf.exe file in the Refund-Form-ID_2402331.zip attachment has a file size of 98,304 bytes. The MD5 checksum is the following string: 0x931F17739AF77716EEF9BD2C27CFE501
The PtLGScan.exe in the ptl.zip file has a file size of 157,184 bytes. The MD5 checksum is the following string: 0xB72D36C8829A0CF20A7AB225D4C404A6
A third variant of the VoiceMail.scr file in the VoiceMail.zip attachment has a file size of 38,912 bytes. The MD5 checksum is the following string: 0xDDBA4AD13DE7D5AE604729405C180D65
The FAX_6291741_7941724.exe file in the FAX_6291741_7941724.zip attachment has a file size of 16,896 bytes. The MD5 checksum is the following string: 0x2DEF01154ABED837B8A2F344E342039A
A fourth variant of the _voicemail.scr _file in the voicemail.zip attachment has a file size of 38,912 bytes. The MD5 checksum is the following string: 0x73541F6609D5E7F0678307F4B05BD1A4
A variant of the BanklineForm.scr file in the BanklineForm.zip attachment has a file size of 20,992 bytes. The MD5 checksum is the following string: 0x8D6ED9104072162E4D207B5011B53A1B
The FAX-856412.scr in the FAX-374174.zip file has a file size of 20,992 bytes. The MD5 checksum is the following string: 0x874490A08C77F89EDBAE5CAAE074E5CE
The chd_did7-888277382-29398128.scr file in the chd_did7-888277382-29398128.zip attachment has a file size of 20,992 bytes. The MD5 checksum is the following string: 0x81928270710BAD7443BDBCAA253E4094
The HM Revenue & Customs - TAX.scr in the HM Revenue & Customs - TAX.zip file has a file size of 16,896 bytes. The MD5 checksum is the following string: 0xAD8DC97A1B91A4DEB53A228D7EB8BAD7
The SecureMessage.scr file in the SecureMessage.zip attachment has a file size of 22,016 bytes. The MD5 checksum is the following string: 0x9BA8187CB3359295F8575050ACA4A08D
The voice-478-981-324.exe file in the VOICE479-446-6489.zip attachment has a file size of 16,896 bytes. The MD5 checksum is the following string: 0x8DC4911FD88C8DF0EF98C88CE1A8E44B
The fax_449215305424B53361D1.exe file in the fax_341182B597386A36074F.zip attachment has a file size of 68,608 bytes. The MD5 checksum is the following string: 0x09AD45DDA7AB92CA21621368C1130946
The fax_8B48575278A26635C6.exe in the fax_8B59876830178A796484.zip file has a file size of 68,608 bytes. The MD5 checksum is the following string: 0x08758966D02CFAC0366FC1B9D877417D
The federicabidoli.exe in the federicabidoli.zip file has a file size of 237,056 bytes. The MD5 checksum is the following string: 0x88914E14BE123A28B89059CE8AF8F0E1
The fax_1B5364CA5925EF7080D7.exe in the fax_80414042929385754350.zip file has a file size of 68,608 bytes. The MD5 checksum is the following string: 0xBD8B6CB9FB67575366AB1C04A9B7449E
The Scan-001_200522014_092.scr file in the Scan-001_200522014_092.zip attachment has a file size of 29,696 bytes. The MD5 checksum is the following string: 0x5CB4F3F2CEA5B553B5FFAF4D215FE48D
The PO-0376298-pdf.exe file in the PO-0376298-pdf.zip attachment has a file size of 1,253,961 bytes. The MD5 checksum is the following string: 0xE2FBF477C8094B6143C2C844AB2F2BE2
The LexisNexis_Invoice_05202014.scr file in the LexisNexis_Invoice_05202014.zip attachment has a file size of 26,624 bytes. The MD5 checksum is the following string: 0xBC747585690DE42DB4F241A9B0F509AF
The SecureMessage.scr file in the SecureMessage.zip attachment has a file size of 16,896 bytes. The MD5 checksum is the following string: 0x672D3CD74CF859C4C3D6AAB9B7B5CA58
The rovida.exe file in the rovida.zip attachment has a file size of 233,472 bytes. The MD5 checksum is the following string: 0x894E7A8CC666916CB276C286742D6AE0
The Scan_001_210514_283.scr file in the Scan_001_210514_283.zip attachment has a file size of 17,920 bytes. The MD5 checksum is the following string: 0x9638CB34D93439249DBFE7F6766ACEE0
The voicemail.exe file in the voicemail.zip attachment has a file size of 27,648 bytes. The MD5 checksum is the following string: 0x5EDA7CB5421BE6418CB477295C5F9A66
The fax_2014_05_21_6C968451B9.exe file in the fax_2014.05.21_49601244C.zip attachment has a file size of 97,792 bytes. The MD5 checksum is the following string: 0xF8C7A65ACA33FBEA75121FE1E9ADAB06
The fax_2014.05.21_7B5940757B.exe file in the fax_2014-05-21_0790051927.zip attachment has a file size of 97,792 bytes. The MD5 checksum is the following string: 0x7EB0C4420B5EF4E8DE1B8FAFF04026E4
The Auto_insurance_and_id_card.scr file in the Auto_insurance_and_id_card.zip attachment has a file size of 28,672 bytes. The MD5 checksum is the following string: 0x95A8FD7A625D3D69F2E728FC3416B979
The voice_message_2014-05-26_E49258996E.exe file in the voice_message_2014_05_26_527615449F.zip attachment has a file size of 79,872 bytes. The MD5 checksum is the following string: 0x8E21AB1B75CD62A0308654185517681E
The myvideo.scr file in the myvideo.zip attachment has a file size of 94,208 bytes. The MD5 checksum is the following string: 0xAC1CFC1AA8F0AB516A70CA98D7054C0A
The PO#MPK28330-35.exe file in the NEW ORDER.zip attachment has a file size of 1,271,864 bytes. The MD5 checksum is the following string: 0x97795D6F9028C19CFA0D34B346303BD1
The Commercial Invoice.scr file in the Commercial Invoice.zip attachment has a file size of 300,409 bytes. The MD5 checksum is the following string: 0xE446C35FDA9D77735C6F6301C19A9C43
The fax_C976513521.exe file in the fax_FC510758E9.zip attachment has a file size of 128,000 bytes. The MD5 checksum is the following string: 0xB18DB739525AFB74734809CCEA75FBFF
The Scan_002_28378181_129.scr file in the Scan_002_28378181_129.zip attachment has a file size of 34,816 bytes. The MD5 checksum is the following string: 0x90FC4E5835AC597679D902B14913023F
The Incident_1BBWHVO9AR3E263.scr file in the Incident_3DSJ667BU539YWU.zip attachment has a file size of 25,088 bytes. The MD5 checksum is the following string: 0x60E9C8FD20210C4A1EE044D98DA4044C
The PO# 355909.exe file in the PO# 355909.zip attachment has a file size of 589,824 bytes. The MD5 checksum is the following string: 0xAA1CFD211FC3EF78F2A978396594D977
The FAX_052914.scr file in the FAX_2957944.zip attachment has a file size of 16,384 bytes. The MD5 checksum is the following string: 0xB3529953D0C9FF86830610A1D0375798
The Fax_0529_scanmessage.zip.scr file in the Fax_0529_scanmessage.zip attachment has a file size of 86,528 bytes. The MD5 checksum is the following string: 0x0E0F57AF216A1EA5FA9ECB87928E92A1
The scan_001.scr file in the scan_001.zip attachment has a file size of 22,528 bytes. The MD5 checksum is the following string: 0x39B159D9542F509E99D221299222AE4A
The CA2013TaxReturnReport.pdf.exe file in the CA2013TaxReturnReport.pdf.zip attachment has a file size of 532,992 bytes. The MD5 checksum is the following string: 0xEE283D3395470B6CA7954E8F54DC36BA
A variant of the IncomingFax.scr file in the IncomingFax.zip attachment has a file size of 27,648 bytes. The MD5 checksum is the following string: 0xB9C3E6AD257984F2F69EAD92B4973CCD
The PO#758584944993.exe in the PO#46474748484_pdf.zip file has a file size of 74,690 bytes. The MD5 checksum is not available.
The Docs P.O #77010# Order.exe file in the Docs P.O #77010# Order.zip attachment has a file size of 305,304 bytes. The MD5 checksum is the following string: 0x5DE7D426843A90010250FBAEA5FBB36D
The PO#1002873 for june.exe file in the PO#1002873 for june.zip attachment has a file size of 151,552 bytes. The MD5 checksum is the following string: 0x4859D26DD085C615AECF0AAB80A175F1
The fax_D02873952730D664993D.exe in the fax_E65278F53754E510312F.zip file has a file size of 86,528 bytes. The MD5 checksum is the following string: 0x7605072C87B6518C3BDFD2F00D8E61B2
The TaxReturnReport.pdf.exe file in the TaxReturnReport.zip attachment has a file size of 19,456 bytes. The MD5 checksum is the following string: 0xAD48C0B2DA738BACCAA3D17418132D79
A variant of the TaxReturnReport.pdf.exe file in the TaxReturnReport.zip attachment has a file size of 19,456 bytes. The MD5 checksum is the following string: 0xCDBFC4C93DDBAD6E2501A419C8BC5431
The Booking_invoice_8768343.pdf.exe file in the reservation_0477389.zip attachment has a file size of 86,016 bytes. The MD5 checksum is the following string: 0xAAA9856E05881C6F8E945B935F37820F
The 09062014DOC.exe file in the 09062014DOC.zip attachment has a file size of 963,124 bytes. The MD5 checksum is the following string: 0x4070B44CAC917C27B8510723C8A62F2A
The Important Chase Private Banking Forms.scr file in the Important Chase Private Banking Forms.zip attachment has a file size of 22,016 bytes. The MD5 checksum is the following string: 0x87A95834731594FC419D1568EC2DB9E8
The scan001.exe file in the revised-PI.zip attachment has a file size of 885,312 bytes. The MD5 checksum is the following string: 0xBF2BCE89AF1F6BC2BB29537C956DBD79
The Database.scr file in the Contract & Shipping Marks (2).zip attachment has a file size of 893,471 bytes. The MD5 checksum is the following string: 0xF3545F49AE1AEA0DE5A3CF5465550712
The PO#811019.exe file in the PO#811019.zip attachment has a file size of 139,264 bytes. The MD5 checksum is the following string: 0x88CC3644FBB5E66ADE01B04AE47CF962
The PO-74893SD-pdf.exe file in the PO-74893SD-pdf.zip attachment has a file size of 619,008 bytes. The MD5 checksum is the following string: 0x9D8A2885287581387874A7A9AFE6FF88
The Scan.scr file in the Scan.zip attachment has a file size of 40,960 bytes. The MD5 checksum is the following string: 0x36E264DE2CB3321756A511F6C90510F5
The fax.scr file in the fax_B2342D2C1212A2423F3E.zip attachment has a file size of 75,776 bytes. The MD5 checksum is the following string: 0x89422FBF08ED72088FD4A6A35A3EE207
The scan P.O #98578.exe file in the scan P.O #98578.zip attachment has a file size of 1,512,697 bytes. The MD5 checksum is the following string: 0x5FBF55FB57341C041E03A9523A77BAE1
The Detailed_Document_ID7723H_June-17_Date_2014.exe file in the Detailed_Document_SN3706.zip attachment has a file size of 241,152 bytes. The MD5 checksum is the following string: 0xCCCEA7AB741B03158227EF94CCECF79E
A variant of the fax.scr file in the fax_B2342D2C1212A2423F3A.zip attachment has an approximate file size of 80,384 bytes. The MD5 checksum is the following string: 0xF36C244B7C7BBF9FAAC94FCDE49F2888
The Document.exe file in the Document.zip attachment has a file size of 3,083,511 bytes. The MD5 checksum is the following string: 0x684ABF827AF70C24B24DC7CB71A42EFA
A third variant of the fax.scr file in the fax_B2342D2C1212A2423F35.zip attachment has an approximate file size of 76,288 bytes. The MD5 checksum is the following string: 0x144F9A4CB4CA00485EA1018A61A81524
A fourth variant of the fax.scr file in the fax_B2342D2C1212A2423F36.zip attachment has an approximate file size of 93,696 bytes. The MD5 checksum is the following string: 0x20A47625A0BBD1C9A32F5822DA10A37E
The fax.exe file in the fax_B2342D2C1212A2423F30.zip attachment has a file size of 92,160 bytes. The MD5 checksum is the following string: 0x0461C0C962F89E8C0BE56D512000F79D
The PO 339704710 dated 17.06.2014.exe file in the PO 339704710 dated 17.06.2014.zip attachment has a file size of 488,960 bytes. The MD5 checksum is the following string: 0x2BA2CEC0DFAE71AFCC32F2FB8480F191
The Voice Message_2454250.scr file in the Vmessage34868.zip attachment has a file size of 106,496 bytes. The MD5 checksum is the following string: 0x0AB934FF0CEFF04D282628CC007FEEBA
A third variant of the IncomingFax.scr file in the_ IncomingFax.zip_ attachment has a file size of 137,216 bytes. The MD5 checksum is the following string: 0xA2AF3F38CB2523DF1FD42E55BC2420F5
The order_id_report_89378973489578943758934.exe file in the_ order_id.zip _attachment has a file size of 145,920 bytes. The MD5 checksum is the following string: 0x46C3B19B3424662929CE5171B3EA3E3F
The order_id.exe file in the order_id.zip attachment has a file size of 92,672 bytes. The MD5 checksum is the following string: 0x744DBBBA03B9EF3D2BECFDAA992FF775
The PO Details_pdf.exe file in the PO Details_pdf.zip attachment has a file size of 844,800 bytes. The MD5 checksum is the following string: 0x49CF6374D4FDB94DB98CFC199C7408C8
The img-324897&Qoutation.pdf.exe file in the img-324897&Qoutation.pdf.zip attachment has a file size of 311,808 bytes. The MD5 checksum is the following string: 0xADE5E0B69DA6A995A7F5A973800BC126
A fifth variant of the fax.scr file in the fax_B2342D2C1212A2423F37.zip attachment has a file size of 82,944 bytes. The MD5 checksum is the following string: 0xA797D28182BC18280E95C90C74F33DE0
The PO-ST78489.exe file in the_ PO-ST78489.zip_ attachment has a file size of 626,176 bytes. The MD5 checksum is the following string: 0xB9976CC333CBD8C170838EAC9EFCD4FE
A sixth variant of the fax.scr file in the _fax_B2342D2C1212A2423F41.zip _attachment has a file size of 178,176 bytes. The MD5 checksum is the following string: 0x0611E989B70246BD5A468E1408E14349
A seventh variant of the fax.scr file in the _fax_B2342D2C1212A2423F42.zip _attachment has a file size of 139,776 bytes. The MD5 checksum is the following string: 0xCD9F3167CE6D63B85CE1AE20DA4F2C38
The following text is a sample of the email message that is associated with this threat outbreak:
> Message Body:
Hello,
In attachment is the shipping docs for your reference. For the payment, we will submit the docs to the bank today.
Another thing, I want to confirm with you if you can accept attached document for you. I have changed the GWNW and CBM. waiting for your reply.
Best regards,
Hemis Limited
E-MAIL: [email protected]
WEBSITE: www.htechant.com
15-50-15
Or
> Subject: March Invoice
Message Body:
**Please find attached your March invoice, we now have the facility to email invoices, but if you are not happy with this and would like a hard copy please let me know.
New bank details for BACS payments are Santander Bank Sort Code 672572 Account No 56096153.
Thanks very much**
Sarah
Or
> Subject: Invoice #0339029
Message Body:
Attached is the invoice received from your bank.
Please print this label and fill in the requested information. Once you have filled out
all the information on the form please send it to [email protected].
For more details please see the attached file.
Please do not reply to this email, it is an unmonitored mailbox!
Thank you ,
Automatic Data Processing, Inc.
1 ADP Boulevard
Roseland
NJ 07068
Or
> Subject: Invoice 911015
Message Body:
Hello,
Please can you let me have a payment date for the attached March Invoice?
Or
> Subject: text notification message
Message Body:
Description: myvodafoneicon1
ID(Password): 1ESITP
Vodafone MMS Service
Or
> Subject: New Fax : 5 pages
Message Body:
Scanned from MFP38362843 by antiphishing.org
Date: Wed, 23 Apr 2014 15:06:15 +0530
Pages: 5
Resolution: 200x200 DPI
Or
> Subject: FW: [Bulk] You have received a new fax message
Or
> Subject: INCOMING FAX REPORT : Remote ID: 545-496-5448
Or
> Message Body:
Dear Sir,
Kindly Quote your best and most competitive prices for the attached
Po/invoice, Please confirm the delivery 3-4 weeks, and send the PI
asap for advance payment. The balance of the last order will be paid
next week along with the advance.
Please send PI immediately. I will call later for further discussion.
Best Regards
Hassan Raza.
purchasing manager.
Arabian Polyol Company Limited (APC)
P.O. Box 1053 Dammam 31431, Saudi Arabia
Tel.: 00966 3 8472466
00966 3 8472466 ext. 256
Tel. Direct: 00966 3 847181200966 3 8471812
Fax: 00966 3 8471293
Or
> Subject: New Voicemail
Message Body:
New Voicemail Message
You have been left a 1:08 long message (number 1) in mailbox from “Burns, Philp & Company Ltd.” 07505729969, on Thursday, 24 April, 2014 at 07:29:02 AM
The voicemail message has been attached to this email - which you can play on most computers.
Please do not reply to this message. This is an automated message which comes from an unattended mailbox.
This information contained within this e-mail is confidential to, and is for the exclusive use of the addressee(s). If you are not the addressee, then any distribution, copying or use of this e-mail is prohibited. If received in error, please advise the sender and delete/destroy it immediately. We accept no liability for any loss or damage suffered by any person arising from use of this e-mail.
Or
> Subject: New Fax Message on 04/24/2014
Message Body:
You Have a New Fax Message
From: (640) 057-2571
Received: Thursday, April 24, 2014 at 11:57 PM
Pages: 7
To view this message, please open the attachment
Thank you for using Ring Central.
Or
> Subject: AmWeek post from [email protected] requires approval
Message Body:
**As list administrator, your authorization is requested for the
following mailing list posting:
List: [email protected]
From: [email protected]
Subject: You received a voice mail
Reason: Post by non-member to a members-only list
At your convenience, visit:
hxxp: //bacds.org/mailman/admindb/amweek
to approve or deny the request.
You received a voice mail : VOICE834-783-5583.wav (27 KB)
Caller-Id: 834-783-5583
Message-Id: QPAGF5G039X3
Email-Id: [email protected]
This e-mail contains a voice message.
Download and extract the attachment to listen the message.
Sent by Microsoft Exchange Server
If you reply to this message, keeping the Subject: header intact,
Mailman will discard the held message. Do this if the message is
spam. If you reply to this message and include an Approved: header
with the list password in it, the message will be approved for posting
to the list. The Approved: header can also appear in the first line
of the body of the reply.
**
Or** **
> Subject: CHECK E=-MAIL
Message Body:
**Hello
Please see attached e-mail
Have you sent it to us?
It looks like spam e-mail so I didn?t open it
If you say it is not spam then I will open it
Have a good day
**
Or** **
> Subject: Email invoice: 5355758
Message Body:
**
This email contains an invoice file attachment**
Or
> Subject: Important Docs
Message Body:
Please review attached documents regarding your account.
Or
> Subject: Fiserv Secure Email Notification - 3494075
Message Body:
**You have received a secure message
Read your secure message by opening the attachment, Incident_3494075.zip.
The attached file contains the encrypted message that you have received.
To decrypt the message use the following password - ISU8sSG2pLL
To read the encrypted message, complete the following steps:
- Double-click the encrypted message file attachment to download the file to your computer.
- Select whether to open the file or save it to your hard drive. Opening the file displays the attachment in a new browser window.
- The message is password-protected, enter your password to open it.
To access from a mobile device, forward this message to [email protected] to receive a mobile login URL.
If you have concerns about the validity of this message, please contact the sender directly.
**
**Or **
> Subject:** Skype Lost voice note**
Message Body:
**Dear
You have one voice message
You can listen to the letter by running the joined document
Skype system:
Date: Tue, 29 Apr 2014 16:55:31 +0900
Message duration is 00:01:16.
**
Or** **
> Subject: RE: Application Approved
Message Body:
Your documents are ready , please sign them and email them back.
Thank you
Phyllis_Rosales
Or
> Subject: Our Order.
Message Body:
**
Good Morning,
Please kindly check the revised PI we have attached, in the PI
you had sent us the left side of the PI is not clear, and is
not workable for us.
You had mentioned in the Origin of cargo and in the place of
Unit FOB price? Please kindly explain it for us.
Pay attention to the Question marks we added to the PI to draw
your attention to complete these parts.
Kindly amend and send me the revised PI so we can make the
down payment instantly.
Best Regards
Tchidi Valentine**
Or
> Message Body:
Dear Sir,
Sorry for updating you with my colleague personal e-mail address; it’s because I have been trying to reach you through using our company email but it keeps on bouncing back. Please find attach the receipt of our balance payment, kindly go through it and get back to us.
Good day.
Or
> Subject: LOAN APPLICATION
Message Body:
Dear Sir/Ma,
I wish to apply for loan and I have make an enquiry from your website, i was told by the representative all the documents I need to send in order to check my credit score.
Therefore, I have attached here with this message all my information as requested by the representative. Please kindly look into it and get back to me if it require more documents from me.
Your kind and positive reply will be highly appreciated
Thanks
Jeff
Or
> Subject:**PO. 300178-80 **
Message Body:
Good Day,
Please find attached a new purchase order for you to process. Please send proforma for approval at your earliest convenience.
It will be very helpful to us if you can let us know how long it will take for this order to be completed.
Your prompt attention to this matter is greatly appreciated.
Please acknowledge received this e-mail asap!!
THANKS & REGARDS,
MARTINA SAWANT
Or
> Subject: New Voicemail Message
Message Body:
You have been left at 1:02 long message (number 1) in mailbox from “Leighton Holdings 14500000 ASX: LEI” 07561749975, on Wednesday, May 07, 2014 at 07:28:09 GMT
The voicemail message has been attached to this email - which you can play on most computers.
Please do not reply to this message. This is an automated message which comes from an unattended mailbox.
Or
> Subject: Fw: Order details ID: 68276-061527267
Message Body:
**Good day,
Thank you for your order. Well let you know once your item(s) have dispatched.You can check the status of your order or make changes to it by visiting Your Orders on xxxx.com.
Order Details
Order VG67xxxx Placed on April 13, 2014
Order details and invoice in attached file.
Need to make changes to your order? Visit our Help page for more information and video guides.
We hope to see you again soon. xxxx.com
**
Or
> Subject: **INCOMING FAX REPORT : Remote ID: 996-xxx-xxxx **
Or
> Subject: NIT SUSPENDIDO
Message Body:
AVISO IMPORTANTE - NIT SUSPENDIDO
De acuerdo a lo establecido en el articulo 4 del decreto 2645 de 2011, “Comunicaciones, citaciones
o notificaciones de actos administrativos enviados a la direccion informada en el RUT, que hubieren
sido objeto de devolucion, por causales de: direccion inexistente, incompleta, traslado del
destinatario, no conocen al destinatario u otras causales que no permitan la ubicacion del inscrito”
La Direccion Seccional de Impuestos de Bogota informa que su NIT se encuentra
suspendido por las siguientes causal. Descargar Nit Suspendidos
Si desea subsanar el estado de “NIT SUSPENDIDO” debe acercarse a cualquier Punto de
Contacto con los documentos soporte exigidos en el Decreto 2820 de 2011; realizar la actualizacion
y y solicitar el levantamiento de medida cautelar con sus respectivos soportes en el Punto de
Contacto donde realice la actualizacion.
Subdirector de Gestion de Representacion Externa
Sandra Liliana Cadavid Ortiz
COLOMBIA UN COMPROMISO QUE NO PODEMOS EVADIR
Or
> Subject: Computer Support Services JJBCL0104291
Message Body:
We have created a new invoice for you. To view your statement including a pdf of this invoice please download the attachment.
Invoice Details
Invoice Number:
Description: 1/4/14 - 30/4/14
Amount: £67.80
Payment Details
Account Number: 0170xxxx
Sort Code: 400822
Account Name: Computer Support Services
Kind Regards
Or
> Subject: Taxes, allowances and tax credits
Message Body:
TAX RETURN FOR THE YEAR 2014
RECALCULATION OF YOUR TAX REFUND
HMRC 2010-2011
LOCAL OFFICE No. 3819
TAX CREDIT OFFICER: Bernadette Harvey
TAX REFUND ID NUMBER: 1356038
REFUND AMOUNT: 904.44 GBP
Dear Applicant,
The contents of this email and any attachments are confidential
and as applicable, copyright in these is reserved to HM Revenue & Customs.
Unless expressly authorised by us, any further dissemination or distribution of this email or its attachments is prohibited.
If you are not the intended recipient of this email, please reply to inform us that you have received this email in error and then delete it without retaining any copy.
I am sending this email to announce: After the last annual calculation of your fiscal activity we have determined that you are eligible to receive a tax refund of 904.44 GBP
You have attached the tax return form with the TAX REFUND NUMBER
ID: 1356038,
complete the tax return form attached to this message.
After completing the form, please submit the form by clicking the
SUBMIT button on form and allow us 5-9 business days in order to process it.
Our head office address can be found on our web site at HM Revenue & Customs: hxxp://www.hmrc.gov.uk
Sincerely
Or
> Subject: Important - Please complete attached form
Message Body:
Dear Customer
Please find below your Banking Form for Bankline.
Please complete Bankline Banking Form :
- Your Customer Id and User Id - which are available from your administrator if you have not already received them
Additionally, if you wish to access Bankline training, simply follow the link below
hxxp://www.natwest.xxxx/banklinetraining
Or
> Subject: **Scan de onthetable.net **
Message Body:
Scan de onthetable.net
Format de fichier: PDF MMR(G4)
Resolution: 200dpi x 200dpi
Le fichier joint est une image numerisee au format PDF. Utilisez Acrobat®Reader® ou Adobe®Reader® d’Adobe
Systems Incorporated pour visualiser le document. Il est possible de telecharger Adobe®Reader® de l’adresse suivante:
Adobe, le logo Adobe, Acrobat, le logo Adobe PDF et Reader sont des marques deposees ou des marques commerciales
d’Adobe Systems Incorporated aux Etas-Unis et dans les autres pays.
Or
> Subject: USAA Policy Renewal - Please Print Auto ID Cards **
Message Body:
**
To ensure delivery to your inbox, please add [email protected] to your address book.
Auto Insurance and ID Cards
Or
> Message Body:
Ciao Stefano Severi ho trovato il vostro profilo su un sito di incontri.
spero vi piaccia il mio saluto video. stai cercando la tua anima gemella?
Or
> Message Body:
Good day
We got a recommendation of you from one of your customers about your
products and there?s a company that wants us to supply those products,
and we would like to order them from your company or more depending on
the price. please check the attached Order to see the products and
quantities the company needs and quote your best selling price by
issuing us Performa Invoice accordingly.
Your FOB Prices and FOB Port of loading.
Your Mode of Payment. ( if by L/C or T/T )
I hope we can establish a long business relationship.
Thank you & Best Regards
EVERWISH COMPANY
Or
> Subject: Fwd: Commercial Invoice
Or
> Subject: Scan from a Xerox WorkCentre
Message Body:
Please download the document. It was scanned and sent to you using a Xerox multifunction device.
File Type: pdf
Download: Scanned from a Xerox multi~7.pdf
multifunction device Location: machine location not set
Device Name: Xerox1610
Or
> Message Body:
As part of our security measures, we deliver appropriate monitoring of transactions and customers to identify potentially unusual or suspicious activity and transactions in the American Express online system.
Please review the “Suspicious Activity Report” document attached to this email.
Your Cardmember information is included in the upper-right corner of this document to help you recognize this as a customer service e-mail from American Express. To learn more about e-mail security or report a suspicious e-mail, please visit us at hxxp://www.americanexpress.com/phishing
Thank you for your Cardmembership.
Or
> Subject: Promotional Mail- Update it into database(Updated Shipping schedule)
Message Body:
**Dear Team,
Please update it into database.
Thanks & Regards
Diptiranjan Muduli
Global Messaging
Infrastructure
services,Internal IT
Tata Consultancy Services Limited
**
Or
> Subject: New Order 05-36-42
Message Body:
Dear supplier,
We are urgently in need to supply our clients demand for the following products as attached.
Please confirm it and send us your quote with proformer ASAP.
Your quick acction will be appreciated.
With best regards
Igor Orlov
Rep. Buyer
Purchasing
Tel. +90 821 4103-429
Fax +90 821 4103-7429
Mobil +90 173 3228 608
Or
> Subject: Scanned Image from a Xerox WorkCentre
Message Body:
Please open the attached document. It was scanned and sent to you using a Xerox WorkCentre Pro.
Sent by: gameaholic.com
Number of Images: 8
Attachment File Type: ZIP [PDF]
File Name: Scan.zip
WorkCentre Pro Location: Machine location not set
Device Name: gameaholic.com
Attached file is scanned image in PDF format.
Adobe®Reader® can be downloaded from the following URL: hxxp://www.adobe.com/
Or
> Subject: fax aus +49(0)30-060-484-62
Message Body:
Faxnachricht [Caller-ID: +49(0)30-060-484-62]
Seiten: 34.
Datum: 17/06/2014 2:17:44 SA.
Kennziffer: B2342D2C1212A2423F3E.
Or
> Subject: Fw: Re: P.O #98577
Message Body:
**I am forwarding this order to you, Please read below mail and check scan P.O #98577 in attachment
Sent from my iPhone
-—Forwarded Message----
> 2014-15-06 | 10:18 | “Carlos Hanandez” wrote:
>
>
> Hello Lian,
>
> Have you checked with your bank? Please tell Janet to confirm pyament of INV #98576 for USD 188,550.
> PLEASE CONFIRM ASAP. Attached is Scan P.O #98578, remember -8% discount this order.
> i await your response as soon as possible.
>
> THANKS/REGARDS
>
> Carlos Hanandez
>
> Sales manager
> Agris trade co.ltd
> 1400 N. W. 65th Place
> Fort Lauderdale, FL 33309
> USA
> Phone: 955-971-3009
> Fax: 955-971-3079
NABORS EMAIL NOTICE - This transmission may be strictly proprietary and confidential. If you are not the intended recipient, reading, disclosing, copying, distributing or using the contents of this transmission is prohibited. If you have received this in error, please reply and notify the sender (only) and delete the message. Unauthorized interception of this e-mail is a violation of federal criminal law. This communication does not reflect an intention by the sender or the sender’s principal to conduct a transaction or make any agreement by electronic means. Nothing contained in this message or in any attachment shall satisfy the requirements for a writing, and nothing contained herein shall constitute a contract or electronic signature under the Electronic Signatures in Global and National Commerce Act, any version of the Uniform Electronic Transactions Act, or any other statute governing electronic transactions.**
Or
> Subject: Fwd: Please send us proforma invoice
Message Body:
Dear sir,
Please send us proforma invoice for which we have attach purchase order below.The items needed are specified in our file.
Sincerely
Truong Ngoc Son
Headquarter
5Flr, 41A Ly Thai To Str.
Hoan Kiem, Hanoi, Vietnam
T: +84-43 9388742+84-43 9388742
F: +84-43 9388737
M: + 84 982396989+ 84 982396989
Or
> Message Body:
Hello,
How are you,
We will be placing the next order by next week,
Please kindly assure us that there will be fast production and goods will be shipped within first week of July 2014.
The balance of the last order is paid and the bank swift is attached in this email.
Please ship out immediately. I will call your office later tomorrow.
Or
> Message Body:
Faxnachricht [Caller-ID: +49(0)30-200-453-07]
Seiten: 73.
Datum: 6/23/2014 2:32:31 PM.
Kennziffer: B2342D2C1212A2423F37.
> > > > > > > > > > > Cisco Security analysts examine real-world email traffic data that is collected from over 100,000 contributing organizations worldwide. This data helps provide a range of information about and analysis of global email security threats and trends. Cisco will continue to monitor this threat and automatically adapt systems to protect customers. This report will be updated if there are significant changes or if the risk to end users increases.
Cisco security appliances protect customers during the critical period between the first exploit of a virus outbreak and the release of vendor antivirus signatures. Email that is managed by Cisco and end users who are protected by Cisco Web Security Appliances will not be impacted by these attacks. Cisco security appliances are automatically updated to prevent both spam email and hostile web URLs from being passed to the end user.
Related Links
Cisco Security
Cisco SenderBase Security Network
Call
Send SMS
Add to Skype
You’ll need Skype CreditFree via Skype
Revision History
| * Version | Description | Section | Date |
|---|---|---|---|
| 39 | Cisco Security has detected significant activity on June 25, 2014. | 2014-June-26 11:57 GMT | |
| 38 | Cisco Security has detected significant activity on June 24, 2014. | 2014-June-25 13:05 GMT | |
| 37 | Cisco Security has detected significant activity on June 23, 2014. | 2014-June-23 18:21 GMT | |
| 36 | Cisco Security has detected significant activity on June 20, 2014. | 2014-June-23 14:46 GMT | |
| 35 | Cisco Security has detected significant activity on June 18, 2014. | 2014-June-19 12:31 GMT | |
| 34 | Cisco Security has detected significant activity on June 17, 2014. | 2014-June-17 19:16 GMT | |
| 33 | Cisco Security has detected significant activity on June 16, 2014. | 2014-June-16 21:05 GMT | |
| 32 | Cisco Security has detected significant activity on June 14, 2014. | 2014-June-16 13:14 GMT | |
| 31 | Cisco Security has detected significant activity on June 12, 2014. | 2014-June-13 13:09 GMT | |
| 30 | Cisco Security has detected significant activity on June 10, 2014. | 2014-June-12 12:45 GMT | |
| 29 | Cisco Security has detected significant activity on June 10, 2014. | 2014-June-11 12:56 GMT | |
| 28 | Cisco Security has detected significant activity on June 10, 2014. | 2014-June-10 12:42 GMT | |
| 27 | Cisco Security has detected significant activity on June 9, 2014. | 2014-June-09 12:06 GMT | |
| 26 | Cisco Security has detected significant activity on June 3, 2014. | 2014-June-05 12:52 GMT | |
| 25 | Cisco Security has detected significant activity on May 30, 2014. | 2014-June-02 12:56 GMT | |
| 24 | Cisco Security has detected significant activity on May 29, 2014. | 2014-May-30 21:11 GMT | |
| 23 | Cisco Security has detected significant activity on May 27, 2014. | 2014-May-29 12:57 GMT | |
| 22 | Cisco Security has detected significant activity on May 26, 2014. | 2014-May-28 12:54 GMT | |
| 21 | Cisco Security has detected significant activity on May 23, 2014. | 2014-May-27 12:12 GMT | |
| 20 | Cisco Security has detected significant activity on May 21, 2014. | 2014-May-23 12:25 GMT | |
| 19 | Cisco Security has detected significant activity on May 21, 2014. | 2014-May-22 12:02 GMT | |
| 18 | Cisco Security has detected significant activity on May 20, 2014. | 2014-May-21 12:26 GMT | |
| 17 | Cisco Security has detected significant activity on May 20, 2014. | 2014-May-20 12:45 GMT | |
| 16 | Cisco Security has detected significant activity on May 17, 2014. | 2014-May-19 13:15 GMT | |
| 15 | Cisco Security has detected significant activity on May 15, 2014. | 2014-May-16 13:17 GMT | |
| 14 | Cisco Security has detected significant activity on May 14, 2014. | 2014-May-15 11:28 GMT | |
| 13 | Cisco Security has detected significant activity on May 12, 2014. | 2014-May-14 11:58 GMT | |
| 12 | Cisco Security has detected significant activity on May 12, 2014. | 2014-May-13 11:42 GMT | |
| 11 | Cisco Security has detected significant activity on May 8, 2014. | 2014-May-09 13:38 GMT | |
| 10 | Cisco Security has detected significant activity on May 7, 2014. | 2014-May-08 13:31 GMT | |
| 9 | Cisco Security has detected significant activity on May 2, 2014. | 2014-May-05 12:19 GMT | |
| 8 | Cisco Security has detected significant activity on May 1, 2014. | 2014-May-02 13:18 GMT | |
| 7 | Cisco Security has detected significant activity on April 30, 2014. | 2014-May-01 11:47 GMT | |
| 6 | Cisco Security has detected significant activity on April 29, 2014. | 2014-April-30 18:56 GMT | |
| 5 | Cisco Security has detected significant activity on April 28, 2014. | 2014-April-29 11:58 GMT | |
| 4 | Cisco Security has detected significant activity on April 25, 2014. | 2014-April-28 14:53 GMT | |
| 3 | Cisco Security has detected significant activity on April 24, 2014. | 2014-April-25 15:37 GMT | |
| 2 | Cisco Security has detected significant activity on April 23, 2014. | 2014-April-24 13:32 GMT | |
| 1 | Cisco Security has detected significant activity on April 22, 2014. | 2014-April-22 20:16 GMT | |
| Show Less |
Legal Disclaimer
- THIS DOCUMENT IS PROVIDED ON AN “AS IS” BASIS AND DOES NOT IMPLY ANY KIND OF GUARANTEE OR WARRANTY, INCLUDING THE WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR USE. YOUR USE OF THE INFORMATION ON THE DOCUMENT OR MATERIALS LINKED FROM THE DOCUMENT IS AT YOUR OWN RISK. CISCO RESERVES THE RIGHT TO CHANGE OR UPDATE ALERTS AT ANY TIME.
A standalone copy or paraphrase of the text of this document that omits the distribution URL is an uncontrolled copy and may lack important information or contain factual errors. The information in this document is intended for end users of Cisco products