Threat Outbreak Alert RuleID8337KVR: Email Messages Distributing Malicious Software on January 25, 2016

2014-11-10T15:16:17
ID CISCO-THREAT-36367
Type ciscothreats
Reporter Cisco
Modified 2016-01-25T13:42:17

Description

Medium

Alert ID:

36367

First Published:

2014 November 10 15:16 GMT

Last Updated:

2016 January 25 13:42 GMT

Version:

30

Summary

  • Cisco Security has detected significant activity related to spam email messages distributing malicious software.

Email messages that are related to this threat (RuleID8337KVR) may contain the following files:

Name | Size in Bytes | MD5 Checksum
---|---|---
purchase order list.exe
| 125,440
| 0x83BE89DBE83A48CEAA88CFAD782B88E3
VOICE763-588-5948763-588-5948.zip / VOICE748-348736.scr | 249,856 | 0xB725067C7926E8A3268D2FABFCAD7B4E
Bank Copy 0932pdf.zip / chiiifeeo.exe | 777,728
| 0xEDBAFFA1A7ED41A21474B65A9FBD8DE8
VOICE5584955353.zip / voicemess20141113.wav.scr | 89,088
| 0xEC614CE1F72D555794B1C6C2219F9009
SLIP.zip / SLIP.exe
| 580,608
| 0xE20AEDC181FC62793893D27E78418D2D
Ausgleich 14.11.2014 - Rechtsanwalt GiroPay AG.zip / Rechnung stornierten Buchung Ihrer Bestellung Facebook vom 14.11.2014.zip / Forderung 14.11.2014 - Rechtsanwalt Facebook AG.com
| 100,864
| 0xF88C3770680D0A27B6623C9720762749

payment copy.zip / payment copy.exe | 251,025 | 0xA37AB35040924F0278E641AA8E273451

PO__0023.zip / crypted.exe

| 428,544
| 0xE4288070292D7AB2E025EB72E1868E4E

Document.zip / payment_slip.scr
| 581,120
| 0xE4622182FBD0C69159C4CF023B0632B

Invoice Today.zip / Invoice.exe | 486,912
| 0xF320A765671982B98647DFF6CB34C872

doc_scan30112014.zip / doc_scan30112014.exe
| 1,304,607 | 0xEA44F12827572FD4BB27571A74BF3DE7
BestBuy_Order_ID_0823037MN.zip / BestBuy_Order.exe
| 149,504 | 0xF5B029DDA621580E968100EC3C881564
Document 700111.pdf.zip / Document 700111.pdf.exe | 585,728 | 0x92B7142D5FDA8EBDC4832D62877E21E7
NewOrder#21003211-pdf.zip / NewOrder#21003211-pdf.exe | 218,112 | 0x6B4D5587F59C72504AF777C9C4943B9F
DHL SCAN COPY.zip / DHL SCAN COPY.exe | 1,208,320 | 0xE1E6AEBDF6DC7476B6ADFFC1B7181BDF
PaymentCopy_004573.gz / Copy_004573.scr | 339,968 | 0x431FCC4CCDE1DDFB298AEEC8AB39DB89
FINAL INVOICE_030415009_mt rir-oil.scr | 692,224 | 0x08075CD8372EC87099C354229C24610C
DOC_oferta_04_2015.zip / DOC_oferta_04_2015.docx.exe | 197,109 | 0x8C0D47CF0E4B7029A524109D2E336FBA
Document.pdf.zip / Document.pdf.exe | 462,848 | 0xA9E3DACE73165AD586FF64F27015BC8A
PAYMENT SLIP.zip / PAYMENT SLIP.com | 905,728 | 0xCE61F4F930E2AA379B323E9ADE5FC4B1
COMMERCIAL INVOICE.zip / shile.scr | 315,392 | 0xE267750267D6B43C461F05969E3D9779
NEW_ORDER_00117491537254-pdf.zip / NEW_ORDER_00117491537254-pdf.exe | 290,816 | 0x880FE76E51519C7FC70C97240C058F3D
Order.zip / flv2.exe | 732,160 | 0x48DD62183C8DAFB1DD5BBC8C55DB5A6B
invoice.00548638.2015.04.08.doc.zip / invoice.92004711.2015.04.08.doc.exe | 111,104 | 0xBF92F9A8BFB0FD9BA585CD90613183F5
Damaged invoice.zip / fragrance Invoice.xls.exe | 401,031 | 0xD0B315E7CC92EF5278B7D17A1585869E
Payment copy.zip / Payment copy.scr | 217,600 | 0x82B1A00F722BB2F145BA3EECC5C3160D
SHIPPING DOCUMENTS.zip / SHIPPING DOCUMENTS.exe | 1,241,088 | 0xA05537A6A300A588325E9CF8B416F5EA
PROFOMA INVOICE.zip / PROFOMA INVOICE.scr | 282,624 | 0x9F5376389B384E78216444B88AB64921
Payment.zip / Payment Copy.exe | 822,784 | 0xE349DA83FDACC13AA42813DD9779A7AD
NF-e_Documento-impresso.zip / Visualizar - NF-e 13-04-2015.EXE | 912,896 | 0xDA3FAD48FA3B1D93D7A8A421C12669CC
Purchase Order.zip / ukaegbu.exe | 630,784 | 0x86E85A2168F1647E82C47289865650A9
Documents.zip / Documents.exe | 1,443,328 | 0x5C9992AED34275D79334B3184219E030
PaymentInvoice.zip / PaymentInvoice.exe | 639,488 | 0x7656AF7212A42230684FBF77C2394964
Order#278.zip / Order#278.exe | 446,464 | 0xFC74FFC5405579D21D5CA49407B820CC
NF-e_Documento.zip / NF-e - Documento 14-04-2015.EXE | 912,896 | 0xB0E6E00545EA73FDF18CA6760F4B261A

Inquiry_Order And Drawing Specification.zip / #Inquiry_Order And Drawing Specification.exe | 1,263,104 | 0xC65110545BF70FA3F18AF29971761355

Doc_00350-AX-pdf.zip / Doc_00350-AX-pdf.exe | 1,443,840 | 0x75AE246938504A808CF135F11DBE722A
order_2015999990.zip / order_2015999990.exe | 310,272 | 0xC2DD39FE957D447439A952877384B304
COPY_0534.gz / COPY_0534.scr | 327,680 | 0x86DFC3F93F2AD7B04AB503C3B4BB9D98
list of goodsItems.zip / NEW_ORDER#.exe | 991,744 | 0x29E2AADC1E6D2B0374397B480EAA4076
14041562738_Provisional Invoice Order No. 74859BL.scr | 843,776 | 0xF94D65DCDD1B829228FB10D6764640A6
ProductSample.zip / ProductSample.JPG.exe | 2,974,720 | 0xC87CF8B143BCC548BDE19784A2C0E52E
Electronic ticket receipt, April 15 PDF Document.zip / Electronic ticket receipt, April 15 PDF Document.exe | 95,988 | 0xDABAC137F4E1A7A33072C6C08F7ABE55
sample.zip / collns.scr | 418,662 | 0xA390B88ACA13021006EDD0E1A3AA18A5
documents.zip / documents.exe | 47,616 | 0xF05EF52164C2E53CAF02F5A026B740DA
PAYMENT_REMIT_FORM-pdf.zip / PAYMENT_REMIT_FORM-pdf.exe | 591,872 | 0x94D4D64FD83CC35DFEC3BB041F6C2198
doc.zip / doc.exe | 19,456 | 0x19DE73C11D8D785654287DF4297DE97B
Purchase Order.zip / Purchase Order.exe | 1,037,312 | 0x9A70A5CAE5D91FE5608B82CF1716D3E4
2013 Shipping Document.zip / Proforma Invoice2014.exe | 627,964 | 0x507C3B70C0EFE9D6B51A26809FABEA7F
Payment Slip_Invoice.zip / Payment Slip_Invoice.exe | 1,030,656 | 0x5E0E5F6862DFD367540A31E5E9858AA3
payment details.zip / payment details.exe | 1,586,176 | 0x99CA205F9847DEC4B9275228CBFCA2F8
Proforma Invoice.zip / Proforma Invoice.exe | 2,374,603 | 0xA6AE324C5CE577A943C7F8A0E96E12FD
payment copy.zip / payment copy.exe | 902,656 | 0xD57B032352FB70A36FF239338D59C917
Our order CCI09042015.zip / Our order CCI09042015.exe | 876,544 | 0xCF110F5DEA9FE8D7C528D6BD38900776
Invoice.zip / Invoice.scr | 44,032 | 0x06F2EF4A436B86EB7E782F3164AE3CE2
Payment Slip.zip / Payment Slip.exe | 2,128,768 | 0xE50B871495FC78CC3F62F58E4D100CBD
New order.zip / New order.exe | 1,436,160 | 0x87599F6A0353CF2B11F01B672D0B6EE2
ProformaInvoicepayment.zip / Swift_06-05-2015_pdf.exe | 887,808 | 0xB41B4E6DCD71BA0E6120C86105C86AB6
NEW ORDER KEMAL.zip / Purchase Order.exe | 979,456 | 0x24D27674B2E497730EB95911FBEC1B8C
Document023.doc.zip / Document023.doc.exe | 458,752 | 0x33F3512C78247E6795C12D987990B4BC
newinvoice234555668.zip / newinvoice234555668.exe | 1,157,120 | 0x7DD775F1327AEFE2D99428BAF19787D8
invoice123.zip / C9ItPM.exe | 48,640 | 0x4C3849E5268D424554EFA26DC4E3EB9E
Purchase Order.zip / Purchase Order.exe
| 450,048
| 0x58E0395C1866BCA72ACEA2565FBEF916

order_1026.zip / order_1026.scr
| 770,048
| 0x83F53DB6F5D29443E9EBD033BC3A5530

PUCHASE ORDER.zip / PUCHASE ORDER.exe
| 757,760
| 0xCFCF3BBE74A11ED58092031FAB3B6A26

payment details.exe
| 430,080
| 0x808A0F9BB79F47DD9D35B286AD7EBBA1

DOC0011169193846-pdf.zip / DOC0011169193846-pdf.exe
| 619,520
| 0x093D38EF6F76DE8F7EC7FD50D880EAB2

invoice123.zip / roxhu.exe | 45,568
| 0xFC0715837CDA681E7D7BD52544905615

payment details.exe
| 524,800
| 0x85AF6D001FA3DD910198E922C211EA2D

PAYMENT SWIFT COPY.zip / PAYMENT SWIFT COPY.exe | 1,221,632 | 0x3925FB3537AA9C947C899CAE8DA74335
Transfer slip0098.zip / transfer9080.exe | 800,768 | 0xA5EBE6F9B8BF2B6FF3EDDCED16E16BD3
Invoice-Packinglist-2015.zip / Invoice-Packinglist-2015.exe | 962,048 | 0x218F7B5639E14ED004204FA3F121811F

rejection_invoice_information.zip / cancelation_invoice_information.exe
| 36,864
| 0x723A7BE5618646848506E5611CD1A967

Quotation Sample.scr
| 3,276,800 | 0xAADC9E7DDD9E5938B7A8B3879206E410

NEW ORDER.zip / NEW ORDER.exe | 622,080
| 0x2178468A21BE9E1CDFAF5763DD9E235F
New Purchase Order.zip / New-Order.xls.exe | 438,784 | 0x2F9F4CA7C42A22460269B8FF1D64DD15
Forderung an Sissi. 18 05.2015 - Inkasso Bank Payment AG.zip / Sissi Rechnung 18.05.2015 - Inkasso Bank Payment AG.com | 171,520 | 0xAAD2E98D6CBF095B70C0F5B291B4D779
PUCHASE ORDER.zip / PUCHASE ORDER.scr | 670,208 | 0x64AF9D2F5D90C007546FD34D57B44EC0
Invoice Copy.zip / Purchase Order.exe | 1,762,304 | 0x3A13D96242606E698727B052D6CA0575
INVOICE COPY.zip / INVOICE COPY.scr | 1,236,992
| 0x18B7CBC18370F70CC3941AFC081DDE19
Invoice-0560097.zip / fax_data.exe | 29,184 | 0x4B128889A7AAE1D660B6E3468E81399B

Invoice-17596017.zip / Scan_LOG.exe | 143,360
| 0xA76B0A7ECB010E08673B9C50C32FF9E4

Invoice-13662967.zip / Scan_LOG.exe
| 29,184
| 0x90B506F153F97B0022E387F40D5CEA67

TT COPY.zip / TT COPY.exe
| 673,792 | 0xE75E3639303609A32483C792C17750D9

Original HSBC BLKSK Copy.pdf.gz / Original HSBC BLKSK Copy.com | 819,712 | 0xD8C219AE0FC6CA1780970DF1CFE7FAB3
PURCHASE ORDER 10234.zip / PURCHASE ORDER 10234.exe | 1,832,673 | 0xC2072759C2EA494365D1948E727DDB6A
Invoice-55674.zip / Payment_slip.exe | 800,960 | 0xC7A2783DC6603D66F4D24BDDD6584BB6
NEW ORDER 1322.zip / NEW ORDER 1322.exe | 1,833,087 | 0xC8F3FD6E2EF5F664F621A9138629AAD5
541102.zip / Pampered_order.exe | 143,360 | 0x35514BADE2C574C4C0A7D6154EA3BDCB
transfer copy.zip / transfer copy.scr
| 1,296,384
| 0x897F6E0B1608154164B035D140EDBB6F

BANK COPY.zip / BANK COPY.scr | 184,384 | 0x479053ACE91BC883FEE2FE7D77092BA1

Invoice Order #6025 Doc_Pdf.zip / Invoice Order #6025 Doc_Pdf.exe | 297,031 | 0x4F2AEDB9C2FDB2DA392113DC6ADB9A1C

Overdue_payment.zip / Reminder3479.exe | 110,592 | 0x20AB7F997D8833A3126620032D460AFB
PAYMENT.zip / PAYMENT.exe
| 710,656 | 0x69307D397C40035B6DEC817FB309796B
payment slip.zip / payment slip.exe | 730,112
| 0xEF59AE6EE87E2CA5BD9249FBC28DB762

swift scan copy (jpeg).zip / swift scan copy (jpeg).jpeg.exe | 164,864
| 0xB7EB0F508AB736A899B35E17CB288440

Payment-advice.zip / Payment-advice detail's.exe | 582,144
| 0x2B0481E39E7D7483BC0121A0452ECCC
Tracking_Slip.zip / Tracking_Slip.scr
| 1,321,984
| 0xB7F953AF9E3B4CEEE11E94E574847748

PIC5817787910-JPG.scr
| 539,136
| 0x71CD5534271678746262C57531387CB9

Order BC10453 .zip / ele.exe
| 283,136
| 0xAFE5B5EC5483451B6F226BB764AAA46B

NEW ORDER.zip / NEW ORDER.scr
| 237,568
| 0x8ABF29A283B941B4CBBEA026A49E581D
NEW ORDER.zip / NEW ORDER.scr | 278,528 | 0xDAEA270309F8F944E4AC42E1E8F128E
PAYMENT.zip / PAYMENT.exe
| 641,024 | 0xEE07D3F676F8FE8F712CE0A7C3EC7A47
order.zip / order.exe | 633,344 | 0x92508908AD991FC19E33B00BC482BE71
Requested Order.zip / Requested Order.exe | 3,649,024 | 0xE4E627ABD3401127797978D468E482AB

Payment.zip / Payment.exe
| 551,400 | 0x2BDDD667AF8CD821E39E7FF5F55386BC

order # 89.zip / order # 89.exe
| 638,600
| 0x83DCB44C29279BC6455A7CA26815879E

new order#234-2015.zip / new order#234-2015.exe
| 71,677
| 0x09488E9DCA5bA17BC467b09EFC440282
order.zip / order.exe
| Not Available
| 0xc0C813B3E291873931755980F3E8D8C8

OFFER SHEET_pdf.zip / Purchase Order_pdf.com | 802,039
| 0xBA8981044E758A2AF41A1279B76960D1

Payment_Notification_ID#1826.zip / Payment_Notification_ID#1826.scr
| 786,653
| 0x6793073DC7BF87594F1482C3A94988FD

PAYMENT CONFIRMATION PDF 2016.jar | 120,212 | 0x60DF2AD04CF509D83ACE134CD1FDC865

Transfer slip..jar | 122,201 | 0x400E709F23888F048C1BF2DAA5C07901

PAYMENT CONFIRMATION PDF 2016.jar | 120,598
| 0x50C3B7EA07199A933EBE19925717F7FE

The following text is a sample of the email message that is associated with this threat outbreak:

> Subject: Urgent Quotation/Sample Needed

Message Body:

Dear Supplier
How are you ? I got your Email from my business partner
who strongly recommended you to me, our company urgently
in need of your product.
Please check our attached Purchase Order and get back to us with a good quotation
- Your FOB Prices and FOB Port of loading.
- Your estimated delivery time.
- Mode of Payment. ( If by L/C or T/T )
Our company wish to purchase the stated goods from your company product, we hope to establish a cordial business relationship with your company. you will find the specifications and quantity accordingly on the attachment.
On receipt of your email we shall proceed on doing business with your company.
Best Regards,

or

> Subject: Fwd: You have received a voice mail

Message Body:

You received a voice mail : VOICE 763-588-5948763-588-5948.wav (24 KB)
This e-mail contains a voice message.
Download and extract the attachment to listen the message.

Or

> Message Body:

Dear sir,
Payment has been issued for invoice No:067432,attached is the bank copy
for your reference.
Kindly confirm receipt as same.
Regards,
Martin Louvren
Procurement Officer.

Or

> Subject: You have received a voice mail

Message Body:

You received a voice mail : VOICE5584955353.wav (26 KB)
Caller-Id: 5584955353
Message-Id: 3PGAO3
Email-Id: xxxxxxxxxxxxx
This e-mail contains a voice message.
Download and extract the attachment to listen the message.
Sent by Microsoft Exchange Server

Or

> Message Body:

This is to inform you that we have concluded plans to finally transfer
your fund to you but we cannot make this transfer without hearing from you
and confirming that you are ready to accept the fund.We are also aware of
the issues you had with your attorney which has been resolved at the
moment and we would advise you get back to this office immediately so that
we can move ahead for the transfer.You are not expected to make anymore
payment whatsoever on this transfer for any reason because as we speak the
fund is ready to be transferred to any of your nominated Bank account or
delivered to your doorstep as you wished.
We therefore urge you to open the attached file named Payment Slip and
then click RUN to view which you would find inside the payment slip
attached your transfer information and the exact day your fund will be
hitting your account.We have your account details already and your long
awaited fund will hit your account within 24 hours of you opening the
said payment slip attached.The file is encrypted so you need not worry.
I want you to proceed now and open the attached payment slip then click on
RUN to view your banking details and the amount to be transferred to your
bank account.Attached is your payment slip.
Congratulations

Or

> Subject: Abrechnung 80576798 vom 14.11.2014

Message Body:

Datum: Fri, 14 Nov 2014 10:06:58 GMT
Von: Rechtsanwalt
An: Jana Richter
Sehr geehrte/r Jana Richter,
das von Ihnen gespeicherte Girokonto wurde im Moment der Abbuchung nicht ausreichend gedeckt um die Lastschrift zu realisieren. Sie haben eine nicht beglichene Forderung beim Unternehmen GiroPay AG. In Vollmacht unseren Mandanten ordnen wir Ihnen an, die offene Gesamtforderung unverzüglich zu begleichen.
Aufgrund des andauernden Zahlungsrückstands sind Sie gebunden zusätzlich, die durch unsere Tätigkeit entstandenen Kosten von 37,67 Euro zu tragen. Wir erwarten die Zahlung einbegriffen der Gebühren bis zum 19.11.2014 auf unser Konto. Für Fragen oder Reklamationen erwarten wir eine Kontaktaufnahme innerhalb des selben Zeitraums.
Es erfolgt keine weitere Erinnerung oder Mahnung. Nach Ablauf der festgelegten Frist wird die Akte dem Staatsanwalt und der Schufa übergeben. Die vollständige Forderungsausstellung, der Sie alle Einzelpositionen entnehmen können, fügen wir bei.
Mit freundlichen Grüßen
Rechtsanwalt Haas Alexander

Or

> Subject: Attention: Customer

Message Body:

Attention: Customer,
Pls view attached copy for payment of our order as instructed by my director.
Thanks
Yours faithfully,

Or

> Message Body:

Dear Sir,
We duly apologize for the delay in sending you a copy of the confirmation; this was as a result of our bank delaying.
Our customer has just informed us to send you a copy of the bank confirmation so you should have the funds in your account between today and tomorrow.
Regards

Or

> Subject: Today's Transaction

Message Body:

Hello Sir,
I have attached invoice for the previous transaction
and the new account log on details as you requested
please go through it and update me about the next
project for the season.
Regards,
Kate Edwin

Or

> Subject: Order Status

Message Body:

E-shop Best Buy has received an order addressed to you which has to be confirmed by the recipient within 4 days.
Upon confirmation you may pick it in any nearest store of Best Buy.
Detailed order information is attached to the letter.
Wishing you Happy Thanksgiving!
Best Buy

> > > Or

> Subject: Purchase Order!!

Message Body:

Dear Sir / Madam,
Attached is Purchase Order #700111 from Al-Bilad Polyethylene & Polypropylene Factory.
I'd like to have this Picked up tomorrow for regular Morning Delivery.
Please confirm this Order so That WE CAN Proceed Immediately.
Best Regards

Or

> Subject: NewOrder#21003211

Message Body:

Dear Mr Sir
Please refer to the attached order for your kind attention.
FYI, stack sampling is required for every six months and report will be
submitted to DOE. As for LEV testing, the monitoring is annually.
Regards

Or

> Subject: DHL EXPRESS SHIPMENT ADVISORY

Message Body:

The following 1 piece(s) have been sent by a Customer via DHL Express
on 19-02-2014 via AWB# 96 0127 8831
Find attached Scanned copy of the Docs and more information
about the parcel
If you wish to track this(these) shipment(s) please contact your local
DHL customer service office or visit the DHL Web Site at
hxxp: //www.dhl.com
If you have a Web-enabled mail reader, click the link below to view
shipment tracking
details: hxxp: //www.dhl.com/en/express/tracking.html?AWB=9601278831&brand=DHL
Find attached Scanned copy of the Docs and more information
about the parcel
SHIPMENT CONTENTS:
ORIGINAL DOCUMENTS FOR INVOICE 100661

Or

> Subject: STATEMENT

Message Body:

Dear Customer,
Please find attached a Statement of invoices on your account as at today's
date.If you require any copy of invoices, or have any queries,please do not
hesitate to let us know.
Best Regards

Or

> Subject: FINAL INVOICE_030415009 MT ri

Message Body:

Dear Sir,
Please, see attached our final invoice for MT Rir-oil 3.
Kindly confirm the payment.
Regards

Or

> Subject: Fwd: oferta

Message Body:

BUENAS TARDES

Or

> Subject: NBM205147-PO

Message Body:

Dear Sir
Please refer to the appendix to review our revised purchase order
NBM205147. Kindly send us your quick confirmation and ETD schedule.
Your early reply will be highly appreciated, thank you.

Or

> Subject: Long overdue payment

Message Body:

Attached please find statement of account for your perusal.
Should your end need further clarification please do not hesitate to contact the undersigned
We look forward to payment.
If you have already attended to payment, please disregard this letter and advice us the payment details. As always, we thank you for your patronage and your continued support.
Please confirm & revert receipt of this email.

Or

> Message Body:

Dears,
We sent you this important e-mail earlier, And we have not heard back
from you, We are wondering if you receive it. Again, Kindly find the
ISF FORM & COMMERCIAL INVOICE as attached.
Your Urgent response is much appreciated.
Looking forward to your prompt reply.

Or

> Message Body:

We have not received the confirmation of this order below.
Please, confirm attached order and give your confirmation to enable us proceed with payments.
Best regards

Or

> Subject: Fwd: Order Confirmation

Message Body:

Hello Sir,
We did not receive your response about our new Order we sent to you.
Please find our re attached PO N0. 2201000741 it in excel format zipped.
Please send us the order confirmation with delivery schedule so we can prepare payment.
Thank you.

Or

> Subject: Payment Reminder email

Message Body:

Hello,
Payment Reminder: your invoice 22411428 dated 07.04.2015 in the amount 803.01

Or

> Subject: Damaged Invoice 09.04.2015

Message Body:

Find the attached file and go through the information within. Sorry for any inconveniences.
Thanks & Best regards

Or

> Subject: Re: Payment copy

Message Body:

Good day to you,
Thank you for your reply email, attached is our signed invoice and payment confirmation,kindly confirm back to us with transport details.
Thanks

Or

> Subject: Shipping documents

Message Body:

Dear Sir/Madam,
Attached is the Shipping documents and BL as assigned to deliver to you.
kindly confirm if the address is Correct.
Original copy of Bill of Lading and other relevant documents for clearing
of consignment in your port Notification for shipment event group
"Clearance event" for 13 April. 15.
==================================
AWB Number: 8570779348
Pickup Date: 2015-04-20 20:05:00
Estimated Delivery Date: 2015-04-23 23:30:00
Service: P
Pieces: 1
Cust. Ref: 030100761
Description: XXXXXXXXXX
Ship From: ABC Cargo Supplies Ltd

Or

> Subject: PAYMENT

Message Body:

Good day,
Please advice the payment status for the attached invoice.
Regards

Or

> Subject: RE:Payment

Message Body:

Dear Sir/Madam,
Please send us the correct account number for us to make the balance
payment the bank said the account number you gave us is not correct kindly
check the attachment and send us the correct account number now.
Thanks & Regards

Or

> Subject: Segue NF-e

Message Body:

Em anexo NF-e (88733482711046)

Or

> Subject: Purchase Order.zip

Message Body:

Purchase Order.zip

Or

> Subject: DHL AWB# 34 5673 0015 / shipment

Message Body:

Dear customer,
The following 1 piece(s) have been sent by a Customer via DHL Express on 13-04-2015 via AWB# 34 5673 0015
Find attached Scanned copy of the shipping documents and more information about the parcel and confirm
if the address is correct for shipment.
Thank you.

Or

> Subject: Fw: Re payment for new invoice

Message Body:

Good day,
We plan to issue payment at once for all orders made so far, Please
confirm attached
Invoice document for immediate payment to your company.
Waiting for your speedy action.
Regards

Or

> Subject: Re: Order#278

Message Body:

Dear Sir,
We sent email to you yesterday about payment of our order but we did not
receive your reply, so we are sending with our other email maybe you did
not receive it.
Please we want to receive our order as soon as possible.
Kindly send your invoice so we can process your payment.
Our purchasing manager in charge of this order has gone to exhibition.
Find the attached file to confirm our order.
Pls respond as soon as possible.
Med venlig hilsen / Best regards

Or

> Subject: Segue NF-e - 8899597

Message Body:

Emissão de NFe: 53150401644895007444550060005114641689612598

Or

> Subject: WG: Send us Quotation for all attached items

Message Body:

Dear Sir/madam
Hope you are good.
Kindly find attached project Inquiry and drawings and acknowledge if the products and drawings in the attached file is in your production range and quote us your best prices as per specifications mentioned in the attachment.
Note: 1, all quotations must be duly signed and stamped.
2, Also include your delivery mode and payment terms in the quotation.
Your immediate response will be highly appreciated.
Best Regards

Or

> Subject: URGENT RECONFIRMATION;

Message Body:

Dear
Please reconfirm the attached stamped documents sent to us, if its
from your company and correct the account IBAN before we proceed for
payment. Also
send us with the best prices for the attached new order.

Or

> Subject: Re: Your Over Due Balance Payment

Message Body:

Good day,
We received your message about the change in your bank account details and we
have this morning sent the outstanding payment to your new account.
Attached is the bank wire transfer copy along with missing shipping document
for your reference.
Kindly let us know if everything is okay.
Thanks

Or

> Subject: Inquiry

Message Body:

Dear Sir/Madam
We got your recommendation from a customer and we will like to place
some orders and Kindly find the list of goods/Items we need in the
attached Below
please Quote Your FOB Prices and FOB Port of loading.
Your estimated delivery time.
Your Mode of Payment. ( If by L/C , CAD or T/T )
Please kindly send your prize list and product catalog.
Thank you.

Or

> Subject: Provisional Invoice Order No. 74859 B/L

Message Body:

Dear Sir,
Please find attached Provisional invoice and LOI for a\m cargo
Kindly confirm payment for value date 16.04.2015
Besr Regards,

Or

> Subject: Re: Mrs. Sharon Adler from John Blacks Ltd

Message Body:

Thanks for your response to my mail of Products Purchase enquiry. Here is our company details and the sample of the needed products.
Please be in formed that we need the best price because we want to purchase in large quantity as we have order offer to compare with yours.
view the attached products sample and get back to us with your best quotation.
Looking forward for your prompt response
Regards

Or

> Subject: Virgin Australia e-Ticket April 15

Message Body:

Thank you for choosing to travel with Virgin Australia
Virgin Australia

Or

> Message Body:

Dear Sir,
We are Sweden Trading LLC, We just went
through your advertised Products. Our company deemed it necessary to place
an order with your company.
But nevertheless, we would like to get your
fairest price and estimated time of delivery for goods
purchase. please find attach sample and the list of products we want
to buy .
We shall wait for your email after you must have reviewed the P Order.
Kindly regards

Or

> Message Body:

Please read attached.

Or

> Subject: PAYMENT_REMIT_FORM

Message Body:

Dear sir,
Kindly find attached file.
Thanks & Regards,

Or

> Subject: Fax

Message Body:

Please read attached.
E. Gluck Corporation has relocated our corporate headquarters to our new facility at 6015 Little Neck Parkway, Little Neck NY 11362-2500. All telephone numbers remain the same, including the Manhattan Showroom

Or

> Subject: Fwd: PO

Message Body:

Goodday,
Please we are very much interested in Purchasing good and high quantity of
your company product or you can assist us to purchase this order
Attached is the PO and Specification for your preview. Kindly get back to us
with your best price and quotation.
With best regards

Or

> Subject: Purchasing order

Message Body:

Dear
It have been a long time, hope your business is moving well.
We want to place a repeat order as last time. Attached is the last shipping document of our previous order, so Make sure you quote us the best price
waiting for your confirmation so that i can send our Purchasing order ASAP.
The order quantity is same as before.
Thanks

Or

> Subject: Re: Re;payment slip of PO#80339280

Message Body:

Hello
Please confirm invoice and T/T copy of the shipment and get back to me at the earliest so our bank can complete payment transfer waiting for your confirmation as soon as possible
Best regards

Or

>
Subject: PAYMENT

Message Body:

hello,
kindly be informed that we have made payment inot your account. kindly viwe the attachment
and check your account for confirmation.
REGARDS

Or

>
Subject: Re;proforma invoice of PO#80339280

Message Body:

Please confirm proforma invoice (PO#80339280 ) of the shipment and get back to me at the earliest am waiting for your confirmation as soon as possible
Regards
Sales and purchase Dept.

Or

>
Subject: Attached New order

Message Body:

Good afternoon .
I hope that your received my last mail yesterday regarding new order.
I told you that I will make effort for the advance payment shortly.
Thank and best regards.
Sales Management

Or

>
Subject: payment details and new purchase order.

Message Body:

Dear,
herewith enclosed we are sending you the purchase order, we will want an urgent
reply so we can send the payment without delay.
Thank you very much for your cooperation
Best regards
Riccardo Cesetti

Or

>
Subject: Re:NEW ORDER KEMAL

Message Body:

Good Day,
I have resent the Purchase Order for the month of May.
Revert back to us with your company price and Proforma Invoice.
Remember to include your revised bank account details to enable us make
the
payment tomorrow.
Best Regards,
Kemal Bakirci(GBS import and procurement Manager)

Or

>
Subject: RE: ORDER/INVOICE

Message Body:

Reminder!!!!!!
Please be informed this order was just loaded in the container. I have attached copies of the final documents Invoice, packing list, & Certificate of Origin for review and approval.
Let me know if they are OK and we will send you the certified originals.
Best Regards,
Rebbeca Johnson
International Accounts Manager

Or

> Subject: Please quote your best price

Message Body:

Dear Sir
Please quote your best price for the supply and delivery CIF Croatia, of
the following attached:
The following to be attached with your quotation:
1.Copies MTC certificates
2.Relevant pictures and catalogues
3.Advise the delivery period
4.Your offer validity period
5. Package expected gross weight, dimension and dispatch address
complete with postal code.
Your offer should be received on or before 2nd April 2015
Thanks and best regards,

Or

> Subject: PLEASE CONFIRM THE INVOICE SLIP BEFORE TRANSFER

Message Body:

Good Day,
Your customer instructed us to transfer the balance to your account and e mail you the swift copy.
We made the transfer but the account information is different from the one in our records. Check the attached invoice and confirm that its correct.
We will not be held responsible for any wrong transfer.
Best Regards
.

Or

> Subject: PURCHASE ORDER

Message Body:

FYI
sent from my iPhone.

Or

> Subject: New Order

Message Body:

This is Ahmed Trading Co. a Saudi Arabian company in US. We are interesting in your products in large quantity. Kindly find attached a purchase order for what we need and quantity. Please check and quote similar items. Kindly quote your best prices.

Or

> Subject:Re: Purchase Order(edited)

Message Body:

Dear,
Find enclosed our new order, kindly pay attention to the items in red
especially item no.2,5,7,8 and 13. please endeavor to provide us with
the best quality because the future of our partnership depends on the
quality provided.
Awaits your reply
Best Regards

Or

> Subject: FW: Confidential Mail .Confirm Your Bank Account Details From HSBC

Message Body:

Dear sir
This is a confidential mail to confirm the account details before the payment is effected into the account details
This is a new security measure from HSBC to prevent losses,
Attached is the packing and invoice of the transaction for your perusal...confirm it so as to enable the full transfer of funds
Thanks .
Issued by The Hongkong and Shanghai Banking Corporation Limited, India (syndicate). Incorporated in Hong Kong SAR with limited liability.
This e-mail is intended for customers of syndicate India. You are receiving this e-mail as information regarding our products and services. You may, at any time, choose not to receive e-mail marketing literature/information about our products and services by replying to e-mail unsubscribe@syndicate.co.in or click here to unsubscribe. We will delete your e-mail address from our mailing list without charge.
Please do not reply back to this e-mail. This is sent from an unattended e-mail box. In case you have any queries, please send an e-mail to info@syndicate.co.in
This e-mail is confidential. It may also be legally privileged. If you are not the addressee, you may not copy, forward, disclose or use any part of it. If you have received this message in error, please delete it and all copies from your system and notify us by e-mail at info@syndicate.co.in
Internet communications cannot be guaranteed to be timely secure, error or virus-free. The sender does not accept liability for any errors or omissions. We maintain strict security standards and procedures to prevent unauthorised access to information about you. syndicate will never contact you by e-mail or otherwise to ask you to validat as your password. If you receive such a request, please call our customer service hotline numbers.

Or

> Subject: Blocked invoice report

Message Body:

Be noted that your invoice include fake values.
Observe the document and checkup amounts.
Sarah Jones
Bank Security Department

Or

> Subject: Blocked invoice report

Message Body:

Be noted that your invoice include fake values.
Observe the document and checkup amounts.
Sarah Jones
Bank Security Department

Or

> Subject: RE: Purchase Order No. P20100584 / SS0003-Final Settled Price

Message Body:

Dear Sir/Ma
Good Day!
Thank you for quotation regarding our request, we have looked into it and we are satisfied.
Attached here is the specification of our request. Please mail me a competitive price and give us your confirmation on date of shipping along with PI.
Please provide banking details to help us remit advance payment for order. My colleague has forwarded the PO on 26-04-15 but there has been no confirmation from your side. Please see to this request and do the needful.
Awaiting your immediate response
With Best Regards
Nancy D, Kim
Purchase/Sales Manager
KINGS INTERNATIONAL ENT. TRADE CO.,LTD (EXP/IMP)
Oliefabriksvej 61
2770 Kastrup
Denmark

Or

>

> Subject: New Order

Message Body:

Dear Sir,
Attached is our New order,
please confirm ASAP.
Best Regards,

Or

> Subject: New Purchase Order.

> Message Body:

Dear Sir,
We have received an inquiry from one of our valued client who requires the attached items:
Kindly send your best quotation along with the followings Prices urgently :
1) Ex-works Prices.
2) FOB Prices. (Separately)
3) C & F Karachi basis. (Separately)
4) Lead Time.
5) Validity.
6) Weight and dimensions of the Packed Materials.
7) Packing Cost (If any)
8) Technical Literature (Data sheet, Drawings, Catalogue & Other technical literature).
Should you require any additional information, please feel free to contact us.
Thanks & Regards,
Debbie Kurtz.

Or

>
Message Body:

**Guten Tag Sissi,
Sie haben eine nicht beglichene Forderung bei Bank Payment AG. Ihr Kreditinstitut hat die Lastschrift zurück gebucht.
Die gesamte Überweisung erwarten wir bis zum 20.05.2015. Aufgrund des andauernden Zahlungsverzug sind Sie gezwungen dabei, die durch unsere Tätigkeit entstandenen Gebühren von 47,77 Euro zu bezahlen. Namens und in Vollmacht unseren Mandanten fordern wir Sie auf, die offene Gesamtforderung schnellstens zu begleichen. Bei Rückfragen oder Reklamationen erwarten wir eine Kontaktaufnahme innerhalb von drei Tagen. Die vollständige Kostenaufstellung, der Sie alle Buchungen entnehmen können, int beigelegt. Nach Ablauf der festgelegten Frist wird die Angelegenheit dem Staatsanwalt und der Schufa übergeben.
Mit verbindlichen Grüßen
Inkasso Scwartz Luis

**

Or

>
Subject: FW: STATUS ADVICE TO CUSTOMER Our Ref: BACDUB551262AHA Your Ref: JIN-21103/01

Message Body:

Dear Sir/Madam,
The attached payment advice is issued at the request of our customer. The advice is for your reference only.
Yours faithfully,
Global Payments and Cash Management
HSBC

Or

>
Subject: Re: PURCHASE ORDER.

Message Body:

Good Morning
We are interested in purchasing your products and we sincerely hope to
establish a long-term business relation with your esteemed company.
Kindly view the attachment to see the samples of our requested
product.
Please kindly send us a quotation as soon as possible as to be delivered here in Liuthania.
Your early response would be highly appreciated.
Thanks & Best regards,
Bessit

Or

>
Subject: CONFIRM PAYMENT FOR INVOICE_55674

Message Body:

Dear Sir,
Attached to this mail are important documents for your perusal.
Kindly go through them to confirm payment for goods ordered alongside payment slip
reflecting deposit made today.
We shall be waiting to hear from you afterwards.
Best regards,

Or

> Subject: Invoice Order

Message Body:

hello
Enclosed, please find a copy of invoice order documents sent from our
forwarder.
If you require any further information please contact me again.thanks
note: once you have confirm the invoice Copy do let us know asap.
with regards.

Or

> Subject: Overdue payment

Message Body:

Do you know that your last month's payment was overdue? So we remind you about current payment that need to be made
this week according to the contract which is attached to this letter.

Or

> Subject: Done

Message Body:

Hello
Please Refer to attachment for Confirmation

Or

>
Subject: PAYMENT

Message Body:

Dear sir,
As per the T/T Transfer request, we acknowledge the transfer
has being initiated and the invoice deposit has been transferred
into your company bank account.
Kindly find attach the payment slip Copy for your reference.
Do confirm the attach payment slip for account correction
for any errors.

Or

> Subject: Payment Notification

Message Body:

**Global Payment Services Department


Payment Notification
ZCZC 099452
Date: 17 Jul 2015


We have received a payment instruction for your account with the following details :**

Or

> Subject:Tracking: DH9282927682892 Your Shipment Receipt

Message Body:

Attached is the receipt of your shipment package, Kindly download and unzip to view.
Thanks

Or

> Subject: T/T Swift Copy

Message Body:

Dear Sir,
Attached please find copy of our transfer by swift for the total amount of $178KUSD (only one seventy eight thousand U.S.Dollars) being the balance settlement of your Invoice No:.53070126 dated 25.06.2015–for our PO-2015-81 – CIF BEIRUT BY DHL.
Please proceed with shipment.
Best Regards,

Or

> Subject: New Order JUL-15

Message Body:

Hi Dear,
Here is the snapshot of our order attached beneath for your review and quote your best prices for the month
at once. Please send PI to confirm received.
Please acknowledge the attached Purchase order.
NOTE: provide us the Proforma Invoice for the payment process.
Thanks,

Or

> Subject: New Order JUL-25

Message Body:

Hi Dear,
Here is the snapshot of our order attached beneath for your review and quote your best prices for the month at once.
Please acknowledge the attached New order send PI to confirm received.
NOTE: provide us the Proforma Invoice for the payment process.
Thanks,

Or

> Subject: PAYMENT

Message Body:

Hello Dear
We have made the prepayment of our previous Order TT COPY attached,
Regarding the shipment we had a problem with our formal agent so our
new Agent will contact you for the shipment
Please confirm the payment slip as attached
Thanks & Best Regards,

Or

> Subject: Attached is the remittance copy for our first Order

Message Body:

Attached is the remittance copy for our first Order and our
specifications documents. Please confirm payment as soon as received at
your end.
Best regards,

Or

> Subject: Order Confirmation

Message Body:

Hello
Please review and confirm the attached orders invoice, our company is ready to make the 30% initial deposit payment.Acknowledge if you receive this messages.
Best Regards,

Or

> Subject: INVOICE 0434111 PAYMENT ATTACHED

Message Body:

Dear,
Please confirm delivery date as soon as possible.
We did not get any feedback from your side regarding our payments.
Please send us updates.
We attach our payment copy again. Kindly check it and confirm.
Thanks & Regards,
Atsuko Taniguchi (Ms)

Or

> Subject: New order # 89

Message Body:

Dear starssoul
Attached please find our new order # 89.
Awaiting your SC.
With best regards
Alicja Budelot

Or

> Subject: Oredr 12214

Message Body:

Dear Mr. Sir,
Hope you are well!
We kindly ask you to provide us with the most competitive price for the
attached order.
Please go through the attached and quote your best price , payment term and
delivery terms.
PLEASE NOTE: Item #45 is needed in large quantity so we expect a discount.
We await your urgent reply for this order
Best Regards,
Bahareh Behrooz (M.D.)

Or

> Subject: View our order

Message Body:

Please find attached file our 1st order with your company download and send us your prices in excel format.
Thank you.
Central Trading Company

Or

> Subject: Purchase Order

Message Body:

Dear Sir/Madam,
Please send us proforma invoice for which we have attach purchase order below, the items needed are specified in our file. Kindly preview the attach file.
Sincerely
Ronald Cole

Or

> Subject: FW: Your payment has been scheduled

Message Body:

Good morning
I received the email below and I am sure it is a spam email. I did not click on the attachment to open it. The sender is from Tokyo so I am sure it is spam.
Thanks
Carla Harvey, BA, M. Ed

Or

> Subject: Payment Advice Ref:1[G41978847387] / ACH credits / Customer Ref:[PO925110]??

Message Body:

Dear
Sir/Madam,
The attached payment advice is issued at the request of our customer. The
advice is for your reference only.
Yours faithfully,
Or
Subject: payment confirmation slip

Message Body:

Sir/Madam,
This is to inform you that $445,580.00 has been transferred to your account. Log on to your account for payment
confirmation. Please confirm payment slip and get back to us as soon as possible.
Regards

Cisco security appliances can help protect customers during the critical period between the first exploit of a virus outbreak and the release of vendor antivirus signatures. Cisco Web Security Appliances help secure and control web and email traffic by offering layers of malware protection. Cisco security appliances are automatically updated to help prevent both spam email and hostile web URLs from being passed to the end user.

Related Links
Cisco Security
Cisco SenderBase Security Network

Call

Send SMS

Call from mobile

Add to Skype

You'll need Skype CreditFree via Skype

Revision History

  • Version | Description | Section | Date
    ---|---|---|---
    30 | Cisco Security has detected significant activity on January 25, 2016. | | 2016-January-25 13:42 GMT
    29 | Cisco Security has detected significant activity on July 27, 2015. | | 2015-July-27 21:07 GMT
    28 | Cisco Security has detected significant activity on July 21, 2015. | | 2015-July-22 12:02 GMT
    27 | Cisco Security has detected significant activity on July 20, 2015. | | 2015-July-21 12:29 GMT
    26 | Cisco Security has detected significant activity on July 19, 2015. | | 2015-July-20 13:13 GMT
    25 | Cisco Security has detected significant activity on July 16, 2015. | | 2015-July-17 13:50 GMT
    24 | Cisco Security has detected significant activity on July 15, 2015. | | 2015-July-16 11:16 GMT
    23 | Cisco Security has detected significant activity on May 24, 2015. | | 2015-May-26 12:30 GMT
    22 | Cisco Security has detected significant activity on May 21, 2015. | | 2015-May-22 12:41 GMT
    21 | Cisco Security has detected significant activity on May 20, 2015. | | 2015-May-21 12:09 GMT
    20 | Cisco Security has detected significant activity on May 19, 2015. | | 2015-May-20 12:35 GMT
    19 | Cisco Security has detected significant activity on May 18, 2015. | | 2015-May-18 19:35 GMT
    18 | Cisco Security has detected significant activity on May 14, 2015. | | 2015-May-15 12:00 GMT
    17 | Cisco Security has detected significant activity on May 13, 2015. | | 2015-May-14 13:19 GMT
    16 | Cisco Security has detected significant activity on May 12, 2015. | | 2015-May-13 12:48 GMT
    15 | Cisco Security has detected significant activity on May 11, 2015. | | 2015-May-12 14:47 GMT
    14 | Cisco Security has detected significant activity on May 6, 2015. | | 2015-May-07 12:18 GMT
    13 | Cisco Security has detected significant activity on April 27, 2015. | | 2015-April-29 12:54 GMT
    12 | Cisco Security has detected significant activity on April 23, 2015. | | 2015-April-27 12:24 GMT
    11 | Cisco Security has detected significant activity on April 23, 2015. | | 2015-April-23 12:27 GMT
    10 | Cisco Security has detected significant activity on April 17, 2015. | | 2015-April-17 12:46 GMT
    9 | Cisco Security has detected significant activity on April 16, 2015. | | 2015-April-16 12:41 GMT
    8 | Cisco Security has detected significant activity on April 15, 2015. | | 2015-April-15 13:41 GMT
    7 | Cisco Security has detected significant activity on April 10, 2015. | | 2015-April-10 13:47 GMT
    6 | Cisco Security has detected significant activity on April 8, 2015. | | 2015-April-08 13:32 GMT
    5 | Cisco Security has detected significant activity on April 7, 2015. | | 2015-April-07 13:08 GMT
    4 | Cisco Security has detected significant activity on December 1, 2014. | | 2014-December-01 15:09 GMT
    3 | Cisco Security has detected significant activity on November 14, 2014. | | 2014-November-14 16:47 GMT
    2 | Cisco Security has detected significant activity on November 13, 2014. | | 2014-November-13 17:00 GMT
    1 | Cisco Security has detected significant activity on November 7, 2014. | | 2014-November-10 15:16 GMT
    Show Less

Legal Disclaimer

  • THIS DOCUMENT IS PROVIDED ON AN "AS IS" BASIS AND DOES NOT IMPLY ANY KIND OF GUARANTEE OR WARRANTY, INCLUDING THE WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR USE. YOUR USE OF THE INFORMATION ON THE DOCUMENT OR MATERIALS LINKED FROM THE DOCUMENT IS AT YOUR OWN RISK. CISCO RESERVES THE RIGHT TO CHANGE OR UPDATE ALERTS AT ANY TIME.

A standalone copy or paraphrase of the text of this document that omits the distribution URL is an uncontrolled copy and may lack important information or contain factual errors. The information in this document is intended for end users of Cisco products