Threat Outbreak Alert RuleID4400KVR: Email Messages Distributing Malicious Software on January 28, 2016

2015-01-06T13:54:10
ID CISCO-THREAT-36916
Type ciscothreats
Reporter Cisco
Modified 2016-02-01T14:04:21

Description

Medium

Alert ID:

36916

First Published:

2015 January 6 13:54 GMT

Last Updated:

2016 February 1 14:04 GMT

Version:

82

Summary

  • Cisco Security has detected significant activity related to spam email messages distributing malicious software.

Email messages that are related to this threat (RuleID4400KVR) may contain the following files:

Name | Size in Bytes | MD5 Checksum
---|---|---
Fotos_vizinha.zip / Fotos.exe
| 3,031,552
| 0x2EA7927597D9B5B01589DE740DB8B15D

New Year PO.zip / New Year PO.exe | 1,258,496 | 0x1E7CE2F21DFAE645A1BF1EBB9121BCEC
PO 2015.zip / PO.exe | 616,448 | 0x7E051B659984D141739CB869A6664947
VerintVideoSolutionsCodecs.exe | 15,325,542 | 0x8A00A583001393CFBBB1D263F4BE66F1
PO.zip / PO.exe | 726,528 | 0xB45DBA5BA5197EFC3B9D18428DA8A8F4
PO.zip / PO.exe | 228,484 | 0xF9671D3FFBB2F99799CEE093F0EE6B64
PO_Signed(2015).zip/PO.exe | 272,664 | 0xAAFC861B90CF1CBFD88B3E174D65C5A3
my_photo_sexy.zip /
my_photo_sexy_438543758943753758934.exe | 92,160 | 0x8B254AE8BB33B4F972113108517C6F95
my_sexy_photo.zip / my_sexy_photo.exe | 105,984 | 0x440C74F1500DBE3F825B72908979B782
foto_12308.zip / photo.scr | 467,456
| 0xDB20545D8F2384D4790B465F2426C039

shoot31270.zip / photo.scr | 489,984 | 0x8812F61607B2EC62DD8930218E7171EB
PO.zip / PO.exe | 302,212 | 0x807C06F501D52235D821FA0EEA8B92C2
image.zip / image.exe | 131,140 | 0x8203D6FBC7D01CC3975028DEA277B7AF
photo.zip/1 / IMG_5839.PIF | 381,952 | 0x1E34C4A74FD53E0BC8F2126999AFF818
PO_03092015.zip / PO_03092015.exe | 1,262,592 | 0x07AD7A6543167103FE7D3541212AD3C7
foto.zip / foto.scr | 454,656 | 0x9742DEFA11C131179B5AD390A874E102
PO.zip / PO.exe | 253,060 | 0xD2A60E84A6875E5EBDAFF924C82DD726
foto.zip / foto.scr | 350,208 | 0x8FC0066C443B258E1FD8DFE8DF633EF4
foto.zip / foto.scr | 458,752 | 0xD0583E76C6A4178ADA9747E636C7773E
foto.zip / foto.exe | 26,112 | 0x50E0CE7ADD03E4E41242D5AB96D8BB2C
PO55363.zip / PO55363.bat | 655,360 | 0xCBAABA6837354F577BC2B8A39E9FCD2E
Image.zip / Image.exe | 967,680 | 0x31F6250FC0362027031EFE750EB8BBDF
Ningsih Imp-PO.zip / Ningsih Imp-PO.exe | 186,304 | 0x4890A9270506ACB45FB0D99A639271AA
my_new_photo3726478236487238.zip /
my_new_photo3726478236487238.exe | 92,672 | 0x0DD3B30C4F3E2298CA6EF0A1BB449215
IMG8750179123-JPG.zip /
IMG9117765568-JPG.scr | 8,704 | 0x5FE3A7DD35202FE4A4C3AE23A16375D8
IMG3248323658-JPG.zip /
IMG5333090356-JPG.scr | 6,656 | 0xE22BC261911CE70CEDD292CFE5627EC9
my_new_photo982348923789472389.zip /
my_new_photo982348923789472389.exe | 135,680 | 0x940EBA75182EC3BF38DD0568433736A2
Imagens_000392_ANEXO.zip /
Descompactar - Imagens 0039290392.zip /
Abrir Imagens 0039290392.EXE | 1,457,664 | 0x3EC2201728D24B776AD4FE6CE579BC82
Video4211.exe | 289,280 | 0xABDBD7B0AA93536447492D49F35E241A
PO.zip / PO.exe | 518,596 | 0xEFE5F41DBAA80236F75B33FB051AC8BC
ACCOUNT.zip / PO.exe | 50,221 | 0xBBFFB3161D3754383A1DEF81044029ED
IMG_856278_580133.zip /
IMG_81397072_440503.jpg.scr | 532,480 | 0x2189191938F60FE480CE682ED337A611
Slip.zip / PO.scr | 595,768 | 0x907EAD2BBA4ABE9543E732FD2528D2C2
WindowsPhotoGallery.exe | 138,752
| 0xC03AC1FBCD625F93D2C245D97E06F270
PO.zip / PO.exe | 389,832 | 0x44342F6D888CB168C8CBF887AC43FD4A

PO.zip / PO.exe | 1,100,800
| 0x5838E6BA2459F17CB118E619786F59A7

PO.zip / PO.exe | 415,744 | 0x7B293649BFE13F6A740A6AB73FF89E7B
Quote.zip / pi.exe | 976,384 | 0x82470C275040E95268C46D029D7E2A24

Document.zip / PO.exe | 378,880
| 0x86E3B3ED112FA157F8BA1C126C7BC413

PO.zip / PO.exe | 378,880
| 0x86E3B3ED112FA157F8BA1C126C7BC413

Revised-PO.zip / Revised-PO.exe | 702,976
| 0x48248FD25D1EAB029D8C0AE3B72DE94B

images.zip / image.scr | 904,840
| 0x235BBBE6033A0657DC3BFE304C4F7715
Revised PO.zip / Revised PO.exe | 560,192 | 0x3E1BF570D4FB13B7E2559D664004D6F8
Revised PO.zip / Revised PO.exe | 600,064 | 0x22A23C141506D649097F3F46222AAB98
bankonline.zip / New P.O.exe | 476,160 | 0xF1B0ACDB2C3CA451A28BA45D12394FEE
photo.zip / photo.scr | 343,552 | 0xCF404B780B2C6FB62570BFD1C8CEF6F2
PO090615.zip / PO090615.pif
| Not Available
| 0x7287C1553AC208B999AC7FFCB67B66C0

Revised PO.zip / Revised PO.exe | 557,568 | 0x1BF1CC63E1FAFD4C9B036FB0D4643EBC
Revised PO.zip / Revised PO.exe | 262,144 | 0x887CA21B83529BDEAD926FA02C71DE08
IMG_8606.zip / IMG_8606.pif | 476,672 | 0xE204FC5269638540916A18C71E299C2E
P.O.exe.zip / P.O.exe | 388,608
| 0x42578F663FA4E7D4F0A4BB07D531EFD0
foto_01230_01.07.2015.zip / photo.scr | 473,088 | 0x261AC22349B1BF47B137D1AF54D09B71
photo_913797_01.07.2015.zip / photo.scr | 407,040 | 0xD46B4F73965CA4AAE146E783E8FA71C4
PO_78538-1.zip / _crypt379D060.exe | 344,064 | 0x0E4FD57889F489D6373C615732CD60C9
photo_067872_03.07.2015.zip / photo.scr | 351,232 | 0x00352A8A37004551ACF5342401668BEE
PO.zip / PO.exe | 1,735,168 | 0x1D7729280166AB7207E828FEAF220EEC
Revised PO.zip / Revised PO.exe | 307,200 | 0xF6B5089EA451A4041C0CB801C078D225
PO.zip / PO.exe
| 627,200 | 0xA325F32667BD25655FA65F28ADDACD
PO.zip / Pord_pdf#.exe
| 840,704 | 0xDA547F8E4F07AA93A03A4FB00019611E
IMAGE00002355.zip / IMAGE00002355.exe | 582,656 | 0x336384B78E4F8044DEFB8CDBC98B2462
KIND REGARDS.zip / image.exe | 901,120 | 0x98706E7DCF50481B8300179BBA6C5D0E
PO.zip / PO.exe
| 188,416 | 0xBB33DB7E17A835124E786F7A3D49F2BD
New P.O.zip / Revised P.O.exe | 208,896 | 0xA1B2B3997AD4192C603214AEFB85B713
po.zip / po.exe
| 560,128 | 0x6FF69CF06CC8A02DAFAEA5D3243C409E

new po.zip / new po.exe | 270,450
| 0x105CC69B25C333AA5283E4991C406E6C

Revised PO.zip / Revised PO.exe
| 621,632
| 0x801A8CEC9F8A3B251C6E49A8929F74803

P.O 19781#21072015.zip /
P.O 19781#21072015.scr | 1,049,088 | 0x89834AD99CDA61D1349893B10B824803

P.O for July.zip / efinal.exe | 404,992 | 0xC01BDBF46CEB7F18A1A42B90FADDC236
TT payment information.zip / image01.scr | 174,601 | 0x2AA514DA542C1D177123F8A1C1B3EE69

images.zip / mentos.exe | 12,488,902
| 0x98ACF5414A2965098A6D9A669C97F80A

TT payment information.zip / image01.scr | 174,601 | 0x2AA514DA542C1D177123F8A1C1B3EE69

PO.zip / PO.exe | 274,432 | 0xD54E4BE1F6A519DC35190AF896665E88

HSBC_Telegraphic.Transfer.zip / image01.scr | 173,190 | 0xDF6BA35BB970A003FF5D03D3CC939CFA

my video.zip / my video.exe | 824,320 | 0xFF25E71564189BD002724F562AA115B8
PO.zip / PO.exe | 217,088 | 0x4A9D85AC399F1B2C409F76C7AD829F0C
Payment slip.zip / P.O.exe | 542,720 | 0x3E78D35131ED74ABD0129C983B611DCA

Image.zip / Image.exe | 1,675,264 | 0x0DA08CBB9502F871743CA7D8510EF1CC
PO.zip / PO.exe | 786,056
| 0x7B60FBBAAAB1F13158324B21C08DBE5A

PO.zip / PO.scr | 264,192
| 0xCA04C8341C30F298357C4DE96F50604F

Revised PO.zip / Revised PO.exe | 289,792
| 0xA1482FF826E76D00CC726F28549BB2D7
PO.zip / PO.exe | 1,028,096
| 0x3BC7C8BE7BA7420088BC6B2CD95C5B0C

The Correct Revised PO.zip / Revised PO.exe | 563,200
| 0x9030F3CF6C9ECE78EC70FE4DA4553BE0

PO.scr | 225,280
| 0x99DFE1F60432161FC117B8A400ACCC45

TGRIP 00915.zip / new po.exe | 1,076,224
| 0xBDCBFB46603268D4ABEF3DDA86F397BD

PO2015.zip / PO2015.exe | 243,712
| 0x6279CD186FE80D249C4D34DD6839A154

Revised PO.zip / Revised PO.exe | 553,472
| 0x075E699F19F139AFB774A5FA69AB3CAD

PO.zip / PO.exe | 598,528
| 0x37016D7CBA961C5DAA7F8CC487A3E957

image.zip / image.scr | 581,120
| 0x7A996D4B02456ACE4623969B8AC73A29

PO100415.zip / PO100415.exe | 1,056,201
| 0xDF55636040A29DD9E156A9E6D8F2607A
PO.zip / PO.scr | 504,832
| 0x1E24DEEE5773D898FDBF5845DD41B987

PO45565.zip / 0371 (1).exe | 531,998
| 0x63EFA97E334318EB1DF7C747B2526F2A

P.O.zip / P.O.exe | 707,072
| 0x13AB390E88EE062B0A334D16FDA9DD8A

image.zip / image.scr | 677,376
| 0x4F70B53B41B716315553570E07BC205F

PO PML90819.zip / PO.exe | 577,536 | 0x90EDFED72C06149DEC15E3D4AAF62A5F

PHOTOS.zip / IMAGE.exe | 2,259,456
| 0x78686A54F9E33B4318ADA5F0FABABFA7

PO3435534.zip / PO3435534.pif | 1,106,432
| 0x565A41C2181C40C7A46D522E523F93D3

Shipping Documents Pdf.zip / po.exe | 1,171,456 | 0xF8E5999790787737D78664EEB9D169AD
NEW P.O.zip / NEW P.O.exe | 234,496 | 0xA348FF1A18511C7966C56DA618F5F595
New PO.zip / dddd.exe | 647,168
| 0x2953DBF90548FA27B364E7DA5D167F56

PO_77567.zip / PO_77567.bat | 1,319,764
| 0xAFBEEFEF75B7100DA9A409444C0F0A70
Image.zip / Image.scr | 1,146,880 | 0x3B4090796B2BFF5A2448A729A96CB8AB
01122015_image.zip / 01122015_image.scr | 237,568 | 0x89F7234D15365393112FA80AA4A5B0D7

image0000001.zip / image0000001.scr | 245,760
| 0x57A721CED1BF59252277BF6E1EB4E93C

PO-KLP9012309.zip / PO.exe | 143,360
| 0xCACA22553980A43567BD68883E642DA5

PO12042015.zip / PO12042015.exe | 492,032 | 0x9F2D447FF254CA59E0B1055D62FBE6D5
P.O.zip / P.O.exe | 967,168
| 0x17D0DCFF9A2E73163942E43C058135D6

IMP-01ALCOMBERHAD LC2012.zip / PO.exe | 176,128 | 0x6816B8271F76493B09E30B6DF9229C76

PO_009237-1.zip / PO.exe
| 188,416 | 0x4A1D51DB25236F20AD8478A9AFE2F55D

PI.zip / PI.scr | 348,160 | 0xB72581E3D9A721FA358320F697E40A81
PO#28122015.gz / PO#28122015.com | 634,368 | 0x9E66DAC9CAB9C2EEFEAF8AF8C5412308
PI 43633.zip / PI 43633.scr | 249,856
| 0x01E1229D40C9899D52556340E6106020
PO#9780969.ace / PO#9780969.jar | 118,384
| 0x7F75C70D4B7B7412A7AAE7BA0A038625

po18223.jar | 119,459
| 0x397168FCC38E3FAA6F0C0FE92B398B0B

PO.zip / PO.exe | 590,336
| 0xA1052413C1AA1DEF0C61CDA7FAF84699

P.O.zip / P.O.exe | 590,848
| 0xC4566666B4AC673812F20392203F72C9

The following text is a sample of the email message that is associated with this threat outbreak:

> Subject: Kama Sutra Alentejano

Message Body:

lololololo Kama Sutra Alentejano lolololololo

Or

>
Subject: NEW YEAR PO!!

Message Body:

Dear Sir/Madam,
HAPPY NEW YEAR!!
Attached is the PO.Customer ask us to supply this order early next
week.Please send it immediately.
Best regards,

Or

>
Subject: QUOTEASAP

Message Body:

Dear Sir,
We visited your company site yesterday and see the last posted samples
in the website over the new year, are they new product? we need the
products for new year.
Please advise asap, we are interested in buying from you especially all
your products.please kindly quote the attached new order urgently.
So that our management can approve for the products . please advise
immediately.
1. Delivery time of the product
2. Product warranty
3. Minimum Order Quantity
4. Payment term.
5. can we make payment to you after confirmation.
6. Can you deliver on March 21 /2015? we need the product to start for
new year
Regards,

Or

>
Subject: Daellenbach video

Message Body:

Brandi,
I don’t know if having this on your system will help.
It was on the cd of the video as well.
Legal Assistant

Or

>
Subject: Requirement for PI 4434EFHG 56 $42,850

Message Body:

Dear Sir/Madam
We are interested in the purchase of your products and services. Quality
and delivery is very essential to us. We saw a similar product on your
website so please confirm to us if your company can deliver the exact
same quality shown on the attach.
Kindly go though the attached purchase order and acknowledge the receipt
of purchase order by sending your order acceptance along with proforma
invoice.
Thanking you and look forward to receive your OA and PI to proceed for
remit advance payment.
With best regards

Or

> Message Body:

Hello,
May you kindly acknowledge our attached PO for the month of February and provide us with your PI ASAP?
Best regards

Or

> Message Body: > > Hello,
Kindly Acknowledge Our Attached PO and funish us with your PI ASAP.
We also request to have your LATEST PRODUCTS CATALOGS upon your reply.
Tanks and Best Regards,
(General Manager)

Or

> Subject: My photo

Message Body:

My new photo , send u photo ;)

Or

> Subject: Hallo

Message Body:

-- Von meinem Sony Ericsson Elm gesendet.

Or

> Message Body:

Dear Sir,Madam
We get to know your Company from one of our customers , please
check this sample and tell us if you can supply your products
to us we have customers waiting for it.
Kind Regards.

Or

> Message Body:

-- Sent from my iPhone

Or

> Subject: Purchase Order No 03092015

Message Body:

Dear Supplier,
We have your recommendation through one of your customer about your service and products.
Could you please provide quotation based on the attached Purchase Order.
Kindly let us know your modalities to expedite the supply of your products.
We will need information like available products, payment plans, time of delivery,
mode of delivery, minimum order quantity, trade or cash discount on bulk purchase, etc.
Best Regards,

Or

> Message Body:

Ich kann nicht nachprüfen, was es du?

Or

> Subject: Next Order

Message Body:

Good Day,
Please find attached details as advised..
Kindly let me know if u need anymore information.
Best regards

Or

> Message Body:

Wie du dich hier erwiesen hast?!

Or

> Message Body:

My photo as an attachment.

Or

> Subject: ATTACHED IS P.O /DISPATCHED DOCUMENTS FOR MECHINARY EQUIPMENTS

Or

> Subject: As discussed previously.

Message Body:

Dear Sir/Ma,
My ex-staff Elena Lipsky sent you email late last year.
She has left the company and I am interested in dealing with your company.
We are one of the largest dealers of your products here in Russia.
We are interested in buying large quantities from your company.
Can you please send me your catalogue.
Do you have the exact replicas of the pictures in the attached file?
If you don't have them, can you produce them? How much is your unit price?
what is your minimum order and how long will it take you to produce them.
Your quick response would be appreciated.
Best regards

Or

> Subject: New Order Request For Auto parts - Auto accessories

Message Body:

Good Day,
How was your weekend?
Am resending below !
Find attached Purchase Order request for and
also pictures of desired products and spcecification required.
Check it and give us best Price, Quotation and Period of delivery asap.
Regards

Or

> Subject: Hola my photo

Message Body:

hola my new photo , send u photo

Or

> Subject: You got busted

Message Body:

;D

Or

> Subject: RE: suas fotos em anexo

Message Body:

Peguei suas fotos, estou mandando em anexo para que você possa escolher. Obrigado.

Or

> Message Body:

This shocking video obtained by our reporters shows the the rapes and
beheading of little girls by Islamic State Terrorists.

Or

> Subject: REVISED ON THE PO/QUOTATION

Message Body:

hello friend ,
Please find the attached P.O. for the supply.
Please go through the Purchase Order and provide us necessary documents
mentioned there in,
as per our RFQ requirement (Shipping documents must be prepared
accordingly).
Should you need any additional information, please let me know. (Please
quote the P.O. reference No.
in all your correspondence in regards with this order).
Regards

Or

> Subject: our company's email address

Message Body:

Good day Sir/Madam,
We have been having difficulties with our company's email address some days now.
We believe someone has been contacting us with your email address
asking us to remit payment into another account.
Kindly confirm if the change of account in the attachment is from your company.
We are waiting for your urgent reply.
Best Regards

Or

> Subject: Private photo

Message Body:

Use "hahahah123" to open archive.
;)

Or

> Subject: THE SLIP ATTACHED

Message Body:

Payment confirmation from our bank. please check the attached Payment
Invoice and confirm the bank account.
-------------------------
Swift Input : FIN 202 General Fin Inst Transfer

Or

>
Subject: Dear

Message Body:

Please find the attached PO and get back to me with the Pi immediately
Thanks and Regards
Thank you,

Or

>
Subject: REVISED PO - URGENT SUPPLY NEEDED

Message Body:

Hello,
Having gone through your catalog, we are pleased to inform you that a
customer finds the need of your item for an urgent
purchase.
Please do find the updated list for the order that has been placed with
your company previously. I want to make corrections as we have received
a new order list from our client.
We would like to place a 2FCL order which is needed urgently for
delivery.
Please find attached our revised purchase order for supply.
Best Regards,
Sales

Or

>
Subject: FUND TRANSFER

Message Body:

Dear Beneficiary
Your payment was made successfully over the weekend and please run the application to view your online statement
attached and make the last transfer of $400,000.00 to your designated account if the account details were correct.
Please do not hesitate to contact me if their is any mistake on your account details listed your your data
User ID 03736353244
Password: 877321Ap@
Please change the password after successful log-in.
Management Transfer Department Units

Or

>
Subject: Revised purchase order June 2015.

Message Body:

Today,I send to you our revised purchase order for our branch Office in Japan. Also include
with all necessary shipping instructions that have to be considered.
I kindly ask you to confirm to us this order urgently.
Thanks & Kind regards

Or

>
Subject: Re: New P.O.

Message Body:

Dear Sir,
Please Find attached Purchase Order.
( PC/1214/01/S)Confirm and send us P.I urgently for Payment
Regards,
PRECISE CONTROLS GROUPS EXPORT LLC.

Or

>
Subject: Dear Sir/Madam

Message Body:

**Dear Sir/Madam
We are interested in the following
products below, please send us
quotation for the following
products including Minimum Order
Quantity,FOB
price.
Please kindly check the attachment
to view the product requested.
Wholesale price for our order and
the bigger discount in goods are in
top quality.
Thanks
Best regards,

**

Or

>
Subject: RE: PO.039124 good

Message Body:

Dear Sir/Madam,
Pls see the attached file is our new PO for your reference.
Pls kindly review and acknowledge receipt by return.
Any issue with this PO, pls let us know.
Best Regards

Or

> Subject: Purchase order

Message Body:

Dear Supplier,
Sorry for late reply.
Attached is our Purchase order list for the month of July/August.
So kindly confirm us with our below details required.
Your delivery time
Payment terms
And your products warranty
CIF to Istanbul Turkey
Also confirm us with PI and your company bank account details for the payment.
We need your response asap.
Looking forward to your response with detail
Thank

Or

> Subject: Re: Confirm TT payment information

Message Body:

Good Morning,
My colleague Jenny asked me to forwarded the attached payment instruction to you for confirmation and
signature as we will be processing your payment today.
Please urgently check and confirm your account information as stated
therein and if there is any changes let me know asap.

Or

> Message Body:

hxxp: //54.148.52.77/.images/images.zip

> Or

> Subject: Re: Confirm TT payment information

Message Body:

Good Morning,
My colleague Jenny asked me to forwarded the attached payment instruction to you
for confirmation and signature as we will be processing your payment today.
Please urgently check and confirm your account information as stated therein and if there is any changes let me know asap.

Or

> Subject: NEW PO

Message Body:

Hello,
Please see attached Purchase orders and place in work for sample needs we are short for customer/sales.
Best Regards,

Or

> Subject: [Payment Advice - Advice Ref:[G71467767886] / ACH credits / Customer Ref:[FOR11072015095021BND]

Message Body:

Dear Sir/Madam,*
**The attached payment advice is issued at the request of our customer. The advice is for your reference only.
reconfirm your full address and bank details such as correct account name, Bank address and swift
code etc.
Please do the needful and let us have all required data so we will be able to make the remittance quickly without any hesitation.
Yours faithfully,
Global Payments and Cash Management*

Or

> Subject: Good day! cute girl looking for happiness!

Message Body:

I’m very worried and don’t know at all how to start this letter. My name is Monika.
I’m nineteen years old. I’m studying in the institute and still I didn't have any boyfriend and any serious relationship.

I have three older brothers and they protect me from every boyfriend all time. They keep off anyone to me.
My friends had sex long ago. And they are laughing at me because I have no one.
I don’t know already what can I do in order to my cousin will not invade my privacy.
I heard about the possibility of dating with foreign man to engage in virtual sex through the webcam.

Also we can tell with you. I wanna chat with you because you have extensive experience in relationship.
You can tell me about what men love in sex and what woman have to do to satisfy the men.
Also my friend said me that you are good lover and you wouldn't like deny me..
If you wanna have sex with me, install onlinechat where we can see together through the webcam.
I set a password so anyone can’t pry on us. Password is sexlove

Please I wait you. Thank you ))

Or

> Subject: HI

Message Body:

Dear Sir/Madam,
I'm the purchasing manager of NZ Trading Ltd.
My company has directed me to purchase certain products and from our research you deal on those items.
We are hereby attaching the products we want to purchase for your perusal.
Could you please give us a favorable quote? We await your response ASAP.
Purchasing Manager

Or

> Subject: PO

Message Body:

Good afternoon
I am forwarding the attach purchase order for the second time,now without
a response from your please Process this PO and send us PI to enable us process payment,if you accept the terms Stated.
Thanks

Or

>
Subject: Need PI-Special Orders PO #5713462 & 4713463

Message Body:

Dear Supplier,
We are interested in placing order for the following items in the attached PO with regular packing.
please send pro forma invoice of the PO for deposit as we need it as soon as possible.
Thanks

Or

> Subject: Revised P.O

Message Body:

Dear Sir/Madam,
Please note and confirm new PO 55420 attached below.
Thank you.

Or

> Subject: Order no. TOR03-15-040

Message Body:

Dear supplier.
Your Invoice 12619 is registered, pending to pay.
Best regards.

Or

> Subject: Revised P.O

Message Body:

Dear Sir/Madam,
Please note and confirm new corrrect PO 55420 attached below.
Thank you.

Or

>
Subject: PO

Message Body:

Dear Sir,
Pls. find attached our Purchase order 17520 and send us your order confirmation in return.
Appreciate your prompt response.
Best Regards,

Or

> Subject: TGRIP00915 ORDER

Message Body:

Dear Sir,
Please acknowledge proper receipt of the attached Purchase order TGRIP00915
and advise your Order Acknowledgment and best delivery schedule.
Delivery time Urgent: Please confirm?
Thanks in advance for your comments.
By any chance, do you have Single Belt Edging machine in your Stock?
Or help us get price from your other supply.
Please treat as urgent.
Cordiali Saluti / Best Regards,

Or

> Subject: As per the details provided by our sourcing agent finf attached PO

Message Body:

Dear Esteemed Supplier,
Ref: Amended Copy of System Generated PO on GIP
As per the details provided by our sourcing agent in Taiwan,
Kindly find attached the amended copy of our system generated PO
on GIP and send us Order Confirmations.
Thanks and waiting for your acknowledgement.

Or

> Subject: FW: Revised P.O

Message Body:

Dear Sir/Madam,
Please see attached the correct copy of our revised
Purchase Order.( PC/1214/01/S)Confirm and send us P.I urgently for Payment

Regards,

Or

> Subject: Dear supplier,

Message Body:

I've completed payment, attached is the bank tracking copy.
please confirm receipt of this, and arrange for shipping.
Thanks,

Or

> Subject: Re: As discussed previously.

Message Body:

Dear Sir/Ma,
My name is Miranda Perez and I’m the new Senior Sourcing Specialist for Ramblazz Incorporated SA, Argentina.
I have taken over from Juan Ferrera who has moved over to another company.
Juan Ferrera was in negotiation with your company early last year and from my records here, it was inconclusive.

We like your products and will like to conclude negotiations with your company within the next few weeks.
We need these products as seen in the attached pictures. Please check them out and get back to us with all relevant details.
Will you be kind enough to send me your catalogs?

My CEO and I will visit your factory/showroom and office on the 13th Of October 2015 for further discussions,
deliberations and negotiations. Can you schedule an appointment for us and confirm this date is OK by you?

I will send you our flight itinerary as soon as you confirm this date is OK by you.
We will need your assistance in booking a hotel reservation for us.

Please advice if this arrangement is ok with you, thanks.
Regards,

Or

> Subject:RE: NEW ORDER PO100415

Message Body:

Dear Sir
Attn!
Please find in the attachment our purchase order no 092772015 Will you confirm this by return mail?
See below link for our PO
Thanking you,

Or

> Subject: Purchase Order

Message Body:

Hello,
Please find enclosed herewith our new order.
We look forward to receive a pro-forma invoice.
Thank You
Best regards.

Or

> Message Body:

Hope you are fine,
Please check attached purchase order for the details of our new order.
There are two different order for two different customers, check PO and arrange PI.
Also note our 3% commission is to be included with the total price.
Best Regards,

Or

> Subject: Order No. 1,4,6 & 7

Message Body:

Hello,
please, kindly quote your best prices for our attached order.Your company
came higly recommeded for this order.
For item No 1,4,6 & 7..give your best prices for we wish to make large order.
Add me on Skype for detailed discussion
Awaiting your urgent confirmation
Thanks & Best Regards

Or

> Message Body:

Dear Sir/Ma,
My ex-staff Sarah Hoeness sent you email late last year.
She has left the company and I am interested in dealing with your company.
We are one of the largest dealers of your products here in Mexico.
We are interested in buying large quantities from your company.
Can you please send me your catalogue.
Do you have the exact replicas of the pictures in the attached file?
If you don't have them, can you produce them? How much is your unit price?
what is your minimum order and how long will it take you to produce them.
Your quick response would be appreciated.
Best regards,

Or

> Subject: OUR NEW ORDER - PML90819

Message Body:

Hi,
Enclose please find copy of our new order.
We will have a 40' container from Polaron in 2 weeks. There will be space for few pallets.
Therefore I would like to order some pallets more to feel container.
Please send me feedback/Confirmation ASAP.
Rgds,

Or

> Message Body:

Hello dear how are you doing hope you are fine,
i have not heard from you for long i hope you and the family are doing well
please send my regard to the family
Felicia Kennedy:-)

Or

>
Subject: YOUR LONG AWAITING FUND HAS BEEN APPROVED CONTACT THE PAYING BANK

Message Body:

Federal Bureau of Investigation (FBI)
Anti-Terrorist And Monitory Crime Division.
Federal Bureau Of Investigation.
J.Edgar.Hoover Building Washington Dc
Attention Dear Beneficiary,
This is to officially inform you that series of meetings
have been held for the past 12 months with the Secretary General of the United Nations
Organization. This ended 3 days ago.
It is obvious that you have not received your
Compensation Scam Vitim fund which is to the tune of
$3.5,000,000,00 Million us dollars, Due to past corrupt
Governmental Officials who almost held the fund to themselves for their selfish desires
and some individuals who have taken advantage of your fund
all in an attempt to swindle your fund which has led to so many losses from your
end and unnecessary delay in the receipt of your fund.
The National Central Bureau of Interpol enhanced by
the United Nations and Federal Bureau of Investigation
have successfully passed a
mandate to the current Governor of Washington DC his Excellency
Governor Jay Inslee to boost the exercise of clearing all foreign debts owned
to you and other individuals and organizations
who have been found not to have receive their Compensation Scam Vitim and Contract Sum,
Lottery/Gambling,Inheritance and ete.
I'm officially informing you that everything has been taken care of
by the Federal Government of Washington DC, The United Nation and also
the United State FBI and including taxes, and your fund has been deposited
with the corresponding paying bank, To effect the release of your
fund valued at $3.5 Million us dollars you are advised to download the attachment
fill the form before contacting our correspondent paying
bank in New York USA. for the release of your fund.
MEANWHILE, DOWNLOAD AND FILL HE ATTACHED DOCUMENT FOR PROPER VERIFICATION,
NOTE: THE ATTACHED FORM CONTAIN THERE BANKING INFORMATION AS SOON AS YOU FILL IT
FORWARD TO THE BANK FOR PROPER VERIFICATION BEFORE THE FUND CAN BE RELEASE
TO YOU.
Name: Thomas Michael Krick
E-mail: first-bankremittance@financier.com
Telephone: 507323-9510
Also forward the below information along with the
Attached document as soon as you download and fill the form.
Full Name:_
Delivery Address:
_
Country: _
Occupation: _
Phone Number:
__
Age: __
sex:
____

Or

> Message Body:

Good day,
Thank you for quotation and we are very much satisfied.
Please see the purchase order attached for the items requested and give
us your confirmation on date of shipping.
Your payment is also under process with our bank. My colleague has
forwarded the PO on 17-03-15 but there is no confirmation.
See to this request and do the needful.
Awaiting immediate response
With Best Regards

Or

> Subject: Ref: #2X40

Message Body:

Hello,
We were told to forward the attached P.O to you from our client, one of
your clients.
Regards,
Maersk line Corporate
Office. +1 (800) 321-8807+1 (800) 321-8807 FREE FREE FREE
Visitingaddress: 180 Park Avenue,
Building 105, PO Box 950, 07932 Florham Park, NJ.

Or

> Subject: Payment was rejected!!!

Message Body:

Dear sir,
We have just been informed by our bank that payment that was sent to your bank
by our customer has been returned because it could not be credited to your account.
Attached via below is the document from our bank.

Please contact your bank immediately and do the needful.
Best regards
Kind Regards.

Or

> Subject: [EXT] NEW PURCHASE ORDER FOR HDF151110-11

Message Body:

Fyi
Mit freundlichen Gr??en / Best Regards
Antje Hirschmann
Einkauf / Purchasing

Or

> Subject:RE:FW: PURCHASE ORDER

Message Body:

Please inform when goods as per attached PO will be ready.

Or

> Subject: Need PI-Special Orders PO #4713582 & 4713583 & 4713584

Message Body:

Dear Supplier,
We are interested in placing order for the following items
in the attached PO with regular packing.
please send pro forma invoice of the PO for deposit
as we need it as soon as possible.
Thanks

Or

> Message Body:

Please find soft docs attached. I will get these signed by the Chamber and send them off to you.
Kindest Regards,

Or

> Subject: RE: Contract for supplying old quotation

Message Body:

REMINDER
Find attached
--
Best Regards

Or

>
Subject: PO#28122015

Message Body:

Dear Sir/Madam,
I made enquiries with your company last month,
Please check the Purchase ORDER and issue us a proforma invoice accordingly.
Could you please advise on shipping details again?
Thank you
Best Regards,

Or

> Message Body:

We are enclosed here with the final invoice & packing list
along with BL draft no:753799574 for your reference.
please acknowledge Invoice for the final confirmation.
Regards,

Or

> Subject: #RE Order details attached 1&2

Message Body:

Dear Sir,
Good to know about your products from our partner.
We sent you an email last week, inquiring about your products but unfortunately we did not
receive any response from you regarding our order, so i have just sent it again in case you did not
receive it please confirm also the attached file to confirm details so you can give us Best Quote.
Find our order list in attached file, and kindly revert your draft Quotation on the items to us.
Kindly acknowledge receipt of our order. we have a project to deliver at
the very short moment so we are doing a general procurement to meet up before deadline.
Regards
best regards

Or

>
Subject: New Order #OH140154

Message Body:

Dear ,
Please, find attached new order # 15/012
Kindly pay attention to our Special instruction at the end of this
Order.
We look forward to receive your confirmation order and delivery date.
If you have any queries, please do not hesitate to get in touch.
Thank you,

Or

> Subject: P.O#13097

Message Body:

Good day,
Thank you for quotation and we are very much satisfied.
Please see the purchase order attached for the items requested and give
us your confirmation on date of shipping.
Your payment is also under process with our bank. My colleague has
forwarded the PO but there is no confirmation.
See to this request and do the needful.
Awaiting immediate response
With Best Regards

Cisco security appliances can help protect customers during the critical period between the first exploit of a virus outbreak and the release of vendor antivirus signatures. Cisco Web Security Appliances help secure and control web and email traffic by offering layers of malware protection. Cisco security appliances are automatically updated to help prevent both spam email and hostile web URLs from being passed to the end user.

Related Links
Cisco Security
Cisco SenderBase Security Network

Call

Send SMS

Call from mobile

Add to Skype

You'll need Skype CreditFree via Skype

Revision History

  • Version | Description | Section | Date
    ---|---|---|---
    82 | Cisco Security has detected significant activity on January 28, 2016. | | 2016-February-01 14:04 GMT
    81 | Cisco Security has detected significant activity on January 18, 2016. | | 2016-January-20 13:10 GMT
    80 | Cisco Security has detected significant activity on January 13, 2016. | | 2016-January-15 13:23 GMT
    79 | Cisco Security has detected significant activity on December 28, 2015. | | 2016-January-12 13:15 GMT
    78 | Cisco Security has detected significant activity on December 22, 2015. | | 2015-December-24 14:33 GMT
    77 | Cisco Security has detected significant activity on December 22, 2015. | | 2015-December-23 14:02 GMT
    76 | Cisco Security has detected significant activity on December 15, 2015. | | 2015-December-17 13:42 GMT
    75 | Cisco Security has detected significant activity on December 10, 2015. | | 2015-December-14 13:34 GMT
    74 | Cisco Security has detected significant activity on December 5, 2015. | | 2015-December-07 13:31 GMT
    73 | Cisco Security has detected significant activity on December 3, 2015. | | 2015-December-03 15:56 GMT
    72 | Cisco Security has detected significant activity on November 27, 2015. | | 2015-November-30 13:42 GMT
    71 | Cisco Security has detected significant activity on November 24, 2015. | | 2015-November-24 19:12 GMT
    70 | Cisco Security has detected significant activity on November 21, 2015. | | 2015-November-23 13:36 GMT
    69 | Cisco Security has detected significant activity on November 10, 2015. | | 2015-November-11 13:45 GMT
    68 | Cisco Security has detected significant activity on October 30, 2015. | | 2015-November-02 13:19 GMT
    67 | Cisco Security has detected significant activity on October 26, 2015. | | 2015-October-26 18:52 GMT
    66 | Cisco Security has detected significant activity on October 22, 2015. | | 2015-October-23 12:55 GMT
    65 | Cisco Security has detected significant activity on October 16, 2015. | | 2015-October-19 12:34 GMT
    64 | Cisco Security has detected significant activity on October 8, 2015. | | 2015-October-09 13:39 GMT
    63 | Cisco Security has detected significant activity on October 6, 2015. | | 2015-October-07 11:01 GMT
    62 | Cisco Security has detected significant activity on October 5, 2015. | | 2015-October-05 19:19 GMT
    61 | Cisco Security has detected significant activity on September 30, 2015. | | 2015-September-30 20:36 GMT
    60 | Cisco Security has detected significant activity on September 22, 2015. | | 2015-September-23 12:30 GMT
    59 | Cisco Security has detected significant activity on September 16, 2015. | | 2015-September-18 12:48 GMT
    58 | Cisco Security has detected significant activity on September 14, 2015. | | 2015-September-16 13:20 GMT
    57 | Cisco Security has detected significant activity on September 11, 2015. | | 2015-September-14 13:12 GMT
    56 | Cisco Security has detected significant activity on September 1, 2015. | | 2015-September-01 19:27 GMT
    55 | Cisco Security has detected significant activity on August 26, 2015. | | 2015-August-27 13:02 GMT
    54 | Cisco Security has detected significant activity on August 19, 2015. | | 2015-August-21 12:03 GMT
    53 | Cisco Security has detected significant activity on August 11, 2015. | | 2015-August-13 13:08 GMT
    52 | Cisco Security has detected significant activity on August 10, 2015. | | 2015-August-10 21:13 GMT
    51 | Cisco Security has detected significant activity on August 5, 2015. | | 2015-August-05 20:24 GMT
    50 | Cisco Security has detected significant activity on August 4, 2015. | | 2015-August-04 22:04 GMT
    49 | Cisco Security has detected significant activity on August 3, 2015. | | 2015-August-03 20:20 GMT
    48 | Cisco Security has detected significant activity on August 2, 2015. | | 2015-August-03 16:49 GMT
    47 | Cisco Security has detected significant activity on July 28, 2015. | | 2015-July-29 10:57 GMT
    46 | Cisco Security has detected significant activity on July 24, 2015. | | 2015-July-27 12:21 GMT
    45 | Cisco Security has detected significant activity on July 21, 2015. | | 2015-July-23 12:34 GMT
    44 | Cisco Security has detected significant activity on July 20, 2015. | | 2015-July-21 12:30 GMT
    43 | Cisco Security has detected significant activity on July 14, 2015. | | 2015-July-15 12:29 GMT
    42 | Cisco Security has detected significant activity on July 13, 2015. | | 2015-July-14 12:36 GMT
    41 | Cisco Security has detected significant activity on July 10, 2015. | | 2015-July-13 12:37 GMT
    40 | Cisco Security has detected significant activity on July 8, 2015. | | 2015-July-10 13:12 GMT
    39 | Cisco Security has detected significant activity on July 8, 2015. | | 2015-July-09 13:11 GMT
    38 | Cisco Security has detected significant activity on July 5, 2015. | | 2015-July-07 13:09 GMT
    37 | Cisco Security has detected significant activity on July 2, 2015. | | 2015-July-06 12:29 GMT
    36 | Cisco Security has detected significant activity on July 1, 2015. | | 2015-July-02 13:20 GMT
    35 | Cisco Security has detected significant activity on June 22, 2015. | | 2015-June-24 13:20 GMT
    34 | Cisco Security has detected significant activity on June 9, 2015. | | 2015-June-10 13:26 GMT
    33 | Cisco Security has detected significant activity on June 3, 2015. | | 2015-June-04 12:50 GMT
    32 | Cisco Security has detected significant activity on June 2, 2015. | | 2015-June-03 13:55 GMT
    31 | Cisco Security has detected significant activity on May 29, 2015. | | 2015-June-01 12:44 GMT
    30 | Cisco Security has detected significant activity on May 26, 2015. | | 2015-May-27 13:04 GMT
    29 | Cisco Security has detected significant activity on May 15, 2015. | | 2015-May-18 11:33 GMT
    28 | Cisco Security has detected significant activity on May 10, 2015. | | 2015-May-11 13:36 GMT
    27 | Cisco Security has detected significant activity on April 27, 2015. | | 2015-April-28 11:49 GMT
    26 | Cisco Security has detected significant activity on April 22, 2015. | | 2015-April-22 12:22 GMT
    25 | Cisco Security has detected significant activity on April 20, 2015. | | 2015-April-20 13:06 GMT
    24 | Cisco Security has detected significant activity on April 16, 2015. | | 2015-April-16 12:41 GMT
    23 | Cisco Security has detected significant activity on April 10, 2015. | | 2015-April-10 15:46 GMT
    22 | Cisco Security has detected significant activity on April 9, 2015. | | 2015-April-09 12:28 GMT
    21 | Cisco Security has detected significant activity on April 8, 2015. | | 2015-April-08 13:32 GMT
    20 | Cisco Security has detected significant activity on April 6, 2015. | | 2015-April-06 14:41 GMT
    19 | Cisco Security has detected significant activity on April 2, 2015. | | 2015-April-02 13:00 GMT
    18 | Cisco Security has detected significant activity on March 31, 2015. | | 2015-March-31 13:28 GMT
    17 | Cisco Security has detected significant activity on March 29, 2015. | | 2015-March-30 12:53 GMT
    16 | Cisco Security has detected significant activity on March 27, 2015. | | 2015-March-27 12:31 GMT
    15 | Cisco Security has detected significant activity on March 12, 2015. | | 2015-March-12 13:47 GMT
    14 | Cisco Security has detected significant activity on March 11, 2015. | | 2015-March-11 13:19 GMT
    13 | Cisco Security has detected significant activity on March 9, 2015. | | 2015-March-10 11:05 GMT
    12 | Cisco Security has detected significant activity on March 9, 2015. | | 2015-March-09 13:44 GMT
    11 | Cisco Security has detected significant activity on February 25, 2015. | | 2015-February-26 15:02 GMT
    10 | Cisco Security has detected significant activity on February 23, 2015. | | 2015-February-23 21:26 GMT
    9 | Cisco Security has detected significant activity on February 16, 2015. | | 2015-February-16 16:49 GMT
    8 | Cisco Security has detected significant activity on February 12, 2015. | | 2015-February-16 13:20 GMT
    7 | Cisco Security has detected significant activity on February 3, 2015. | | 2015-February-04 13:47 GMT
    6 | Cisco Security has detected significant activity on January 29, 2015. | | 2015-January-30 14:35 GMT
    5 | Cisco Security has detected significant activity on January 27, 2015. | | 2015-January-29 14:22 GMT
    4 | Cisco Security has detected significant activity on January 21, 2015. | | 2015-January-22 13:36 GMT
    3 | Cisco Security has detected significant activity on January 20, 2015. | | 2015-January-21 14:01 GMT
    2 | Cisco Security has detected significant activity on January 8, 2015. | | 2015-January-12 13:40 GMT
    1 | Cisco Security has detected significant activity on January 5, 2015. | | 2015-January-06 13:54 GMT
    Show Less

Legal Disclaimer

  • THIS DOCUMENT IS PROVIDED ON AN "AS IS" BASIS AND DOES NOT IMPLY ANY KIND OF GUARANTEE OR WARRANTY, INCLUDING THE WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR USE. YOUR USE OF THE INFORMATION ON THE DOCUMENT OR MATERIALS LINKED FROM THE DOCUMENT IS AT YOUR OWN RISK. CISCO RESERVES THE RIGHT TO CHANGE OR UPDATE ALERTS AT ANY TIME.

A standalone copy or paraphrase of the text of this document that omits the distribution URL is an uncontrolled copy and may lack important information or contain factual errors. The information in this document is intended for end users of Cisco products