Threat Outbreak Alert RuleID8337KVR: Email Messages Distributing Malicious Software on August 22, 2016

2015-02-16T15:48:49
ID CISCO-THREAT-37483
Type ciscothreats
Reporter Cisco
Modified 2016-08-24T11:37:11

Description

Medium

Alert ID:

37483

First Published:

2015 February 16 15:48 GMT

Last Updated:

2016 August 24 11:37 GMT

Version:

25

Summary

  • Cisco Security has detected significant activity related to spam email messages distributing malicious software.

Email messages that are related to this threat (RuleID8337 and RuleID8337KVR) may contain the following files:

Name | Size in Bytes | MD5 Checksum
---|---|---
Transfer-copy.zip / Transfer-copy.scr
| 1,182,720
| 0x83D48EE488B55C24C3441B56CE5D82AC

payment invoice.zip / payment invoice.exe
| 1,228,288 | 0x6688E59187C061EA3D879E8C5499BD6C
Payment-Invoice.zip / Payment-Invoice.exe | 578,560 | 0x5C1D77008DECDD71D388AFAEA4FCCBC4
Payment slip 001.zip / Payment slip 001.exe | 1,028,096 | 0xFFCCFCCF274384A4E8C0AFF1549AA648
PRODUCT SAMPLE PET-826561.zip /
PRODUCT SAMPLE PET-826561.scr | 661,936 | 0x08481014E7252F02710FA8D8F364AC0B
16-02-15 Chase Payment Advice.zip /
16-02-15 Chase Payment Advice.exe | 715,264 | 0xD803BC3EDAEDCC619B572252467051E9
order_report.zip / order_report_3287492338.exe | 38,103 | 0x6CFF505357E15EC84FCC74BD5861ABA3
Doc-Bewerbung-Februar-2015.zip /
Doc-Bewerbung-Februar-2015.docx.exe | 273,920 | 0xB7E252CAA40047E0CF0ED45A3935AE5A
documents-131.zip / documents-131.exe | 39,168 | 0x21C1EB70176A91911A4DAF0804894233
Order Confirmation.zip / Order Confirmation.exe | 1,626,112 | 0xAB66D589BBF388646B929A8E92CDD8C1
My new pictures.zip / Product-Orders.exe | 1,452,032 | 0x9466B3764B3FE2BA7FDDD90D83D8F1FB
payments.zip / payments.exe | 301,568 | 0xC641AE9433103E016A1F47E996B35D17
FORM_pdf.zip / order.exe | 811,008 | 0x7AE3AC843BED7E3E4A6396A4BB7EEFF9
Payment Copy_pdf.zip / Payment Copy_pdf.exe
| 282,624
| 0xC6A7BC7F13670803418DE02530AC9D50

Payment_Advice_14594303032015_xxxxxxx138.PDF.zip /
inv.exe
| 903,680
| 0x714024B00318A54BAC68F44E57DA37B4

Original_DOC_01191636816-pdf.zip /
Original_DOC_01191636816-pdf.exe
| 1,060,864
| 0x6DD6C09AFA68D983371A61BDCFDBCC21

Order#009.jar | Not Available | 0x47020B5652A0237BA2480714E9DC1D98
TT_COPY.zip / TT_COPY.exe | 198,656 | 0x6F937B04AFF80F9E7B2CB3B8846DF587
Payment Remittance Copy.zip /
Payment Remittance Copy.bat | 143,360 | 0x0416276E7322F8D637274975F225C94E
SAMPLE ORDER.zip / SAMPLE ORDER.exe | 1,123,328 | 0xB2C8A10781DCE33664244C9220B337AC
Purchase_Order.zip / Purchase_Order.exe | 768,512 | 0xE5FDD9A129B71B1BD117C20B94BCAB07
Balance payment..zip / Doc8779882.exe | 642,560 | 0xBE0964C8468A729B61807D9ADE72E331
Attach.zip / Payment Invoice.exe | 792,576 | 0x6113A46D2376FA5F839D095F4C7DDF69
payment.zip / payment.scr | 122,880 | 0x9FF99F6D50B39F251AA6E694A34D3328
Swift Copy.zip / Swift Copy.exe | 1,100,800
| 0xB42B179F69F74C22A888883412F34051

Payment Approval.zip / payment confirmation.exe | 987,136
| 0x96F978533E149AB1CBB82A02CA505558

SWIFTCOPY.zip / SWIFTCOPY.exe | 631,296
| 0xA724686F2AB5BB58C25CBC8F4E00EA39

Purchase Order.zip / Purchase Order.exe | 665,600 | 0xD4DDBC955E0AED1DAD13D8A1134BD761
pay slip.zip / pay slip.exe | 241,664 | 0x3CA6BD500E5D143EA75AE436F614BE8B
Purchase Order.zip / Purchase Order.exe | 656,384 | 0x485CA6708ECD0B8BE5DCF6CF755C2930
ORDER CONFIRMATION.zip /
ORDER CONFIRMATION.exe | 774,656 | 0x8251F8BDB6BFB47590D93AFF738A73FD
product.zip / product.scr | 1,512,960 | 0x227786AF6735FAFBDFB83C107D21FEE9
New Order.jar | 136,852 | 0xF97EA51E2A2E012E9E79AE522BB499B6
SLIP.zip / SLIP.exe | 341,504 | 0x53C51B74C48417D6BE92C74F3AC31120
Remittance copys.zip / Remittance copys.exe | 609,792 | 0xAC23F35CC4CADE99D52F352D32E0CE4C
Order#90922.jar | 219,395 | 0x79A8D79E34BDDC6F71DE6766CE0A6588
Payment.?fdp.exe | 902,656 | 0x285F3251875F4326C397778ACC205910
payment slip.zip / payment slip.exe | 1,443,328 | 0x20D5DF9F1FC4EF1B00DD4AD32CF08D5D
New Order.gz.zip / New Order.bat | 401,408 | 0x73E026F14DE37EE45870CB8D7620A6F6
SWIFT COPY.jar | Not Available | 0x0F75F44EADEF7FA93C781B3A46372ED6
Purchase Order.zip / Purchase Order.exe | 567,296 | 0xC03AC73C00994E97C36912D6BD918E86
SWIFT COPY.jar | Not Available | 0x590FAAE91A545133FD2B6EF907E9BB0B
Payment Approval.zip / Payment Approval.scr | 315,392 | 0x77D79D36921952C2430697AF42A9B323
Purchase ORDER (1).zip / Purchase ORDER.exe | 636,416 | 0x9EFA0CEFDE53CC0BC3C0E94890030211
2016-KTM82830002U34 Copy.PDF.zip /
2016-KTM82830002U34.exe | 315,392 | 0xF48771F1A04218F3F17A9856EC5EF6EE
payment copy.zip / payment copy.exe | 495,104 | 0x8C026362A4240BEBDFED1AB750D7A872
SC8922_NEW_ORDER.zip / SC8922_NEW_ORDER.exe | 303,104 | 0xCAFD8238CC7BE4C8C715E3F717EB3875
payment_Advice.zip / TT-5678987_3421709.exe | 339,165 | 0xEC1890E046BADAF8ED5FA49AD82F5575
OrderList.jar | 137,465 | 0x10A076C11C64BC01515E208F84D97636
TT Payment Copy.jar | 141,328 | 0x11E36AD7062E794EE827D94B5E2B28A6
100122920101732016 - Copy.PDF.zip / 100122920101732016.exe | 323,584 | 0x2108B3F4DC47CE3EFBD5F650689832CE
TT_SLIP_787334.zip / TT_SLIP_787334.exe | 2,217,984 | 0x00376D9FDC63A29E062486A77E5E4641
NEW ORDER.zip / NEW ORDER.exe | 563,200
| 0x92C806088C8DCB6375CF031EE9D48320

order.zip / order.exe | 1,343,488
| 0x131A93271F773BD26C4C5494F4D0987A

new order.zip / new order.exe | 622,080
| 0x583533BBB9B1E633E55DD6EE16F1C6FB

PAY SLIP.uue.zip / PAY SLIP.exe | 546,304
| 0xD95A73F89994C760FAE6D3C171C3A7B2

NEW_ORDER6767.zip / NEW_ORDER6767.exe | 348,160
| 0xD611BB385569591E443693E76EF5D750

ALL PURCHASE ORDER AND PAYMENT .zip /
ALL PURCHASE ORDER AND PAYMENT .scr | 412,160
| 0xD7D08A0D7EAEAA62301830C81593F4E9

Samples.zip / Samples.exe | 565,760
| 0xBB32120F668D9220E22D13C405E375E2

PAYMENT COPY.zip / USD 20,700.exe | 864,256
| 0xB1CBF8F023A7692DA7FB2F3C55E05ECA

Purchase Order.zip / Purchase Order.exe | 832,000 |

0xB4BF7276D85F467925418184BD26F209

ORDER INQUIRIES.zip / ORDER INQUIRIES.exe | 506,368 | 0x73443F0521237C11C4E1363182AF0EF2
Purchase Order.zip / Purchase Order.exe | 501,248 | 0x6A3661755EE2AE1A937B3A212D5FFF61
Urgent order.zip / Urgent order.scr | 299,008 | 0x8DB9B725205C1716F349F568584EC3D6
LC COPY.zip / Letter of credit.exe | 868,352 | 0xE62534A283384B6EAEB0B8DB3C248BDE
New Purchase.zip / New Purchase.scr | 278,528
| 0x97BABEB2109A279B2A66EBCDCD7EF4CB

Order_List(1).jar | 136,815 | 0xE30ECBF90E735EA061C2B9FF4A7FEA6C
Purchase Order.zip / Purchase Order.exe | 482,304 | 0x6518C621CB4F0263EEF10E29C552B25D
July Order.pdf.zip / July Order.exe | 543,744 | 0x69200354096EF2E3F64CD8968C04B85D
SWIFT_COPY1889.zip / SWIFT_COPY1889.exe | 1,763,840 | 0xD1E4CA599A7ADBE3040BC7BFEF38D9D6
160945-order-advice.zip / 160945-order-advice.scr | 221,184 | 0xF6177321B6FE9225458BCBA32FD8EFB0
order.zip / order.exe | 1,226,240 | 0x24A1E73E09944583D4C83D5E08C7E282
New Order.zip / New Order.exe | 2,284,720 | 0x01FDBC5284B01288E26997D9124A8467
Purchase Order.zip / Revised Invoice 11-07-2016.exe | 1,188,864 | 0xA71D74C0A4DB4039C2557A26192FAAD4
_Swift Copy.zip / _Swift Copy.exe | 598,016 | 0x6D67D6507FD66F676CE6086AF1F1F353
NEW ORDER-46H3200.zip / NEW ORDER-46H3200.exe | 721,408
| 0x70475C4B575F24B0538A65BAA4E64DDF

Copy(1).zip / ALB.scr | 808,448
| 0xF524EE972AB3876FB6D978EB972A9AC2

Purchase Orders.zip / Purchase Orders.exe
| 1,418,752 | 0xAAC36A9794A993F2E896A9CEA32B443F

Purchase Order887799.zip / Purchase Order887799.exe | 569,856
| 0xBBA8448D550BCBD11033D9DA1F6950D6

EC59_Customer_pay_copy.zip / EC59_Customer_pay_copy.scr | 787,456
| 0x4E9C37B899FA19B087345EA1A125951B

NEW ORDER.zip / NEW ORDER.exe | 5,844,992
| 0x7AD9513D957C27535942F7517EFE8172

Payment.zip / Payment.pif | 380,928
| 0x2289B9F1B5667D1D2F78FB127D5D6B7E

Attached TT copy.zip / Attached TT copy.exe | 368,640
| 0xF3D9738557E26886E1757E00DB8347FE

Payment Advise.jar | 343,730 | 0xFDF40F0B6E7D7E780C39722845C0F49C
ORDER.zip/ORDER.exe | 1,532,928 | 0x77DAE7EAB648FC1EEA4711D25397636B
New Order.zip / New Order.exe | 1,310,720 | 0xBB62123E5436A52199119FA78005DD2C
Purchase order No 318, Dt28072016.zip / Purchase order No 318, Dt28072016.exe | 576,512 | 0x9970408B34002669FB4F790AF96EC57C
Swift Copy.zip / Swift Copy.exe | 581,632
| 0x83C861C533B3553CABFD169C706AFA9E
_PAYMENT COPY.zip / _PAYMENT COPY.exe | 237,568
| 0xFA3445C6F75097D5AC314C188E242C01

FILE.zip / Order Sample.scr | 375,640 | 0xDB9FE5C473B4E55368824F8024600A2A

The following text is a sample of the email message that is associated with this threat outbreak:

> Message Body:

Here is the attached Bank Remittance Copy made to your account in regards to the invoice 20985
but the transfer came back, please check if the bank details are correct or any mistake in your bank details.
Thanks,
Head of Account

Or

> Subject: Payment invoice

Message Body:

Dear sir,
I have attached a scanned copy of the swift transfer made to your bank
account for your reference.
Best Regards.
Accounts Manager

Or

> Subject: Swift Copy

Message Body:

Dear Sir,
Sorry for the delay in providing the copy of payment made to your account.
Kindly find in the attachment the copy of payment and reconfirm back by mail.
Best Regards

Or

> Subject: Re: Products sample

Message Body:

Dear Friend,
Please here is the sample of the needed products. We need it in a large quantity and your best price.
I look forward to hearing from you soonest.
Thanks

Or

> Subject: FW: Re: Payment Advice

Message Body:

I tried calling you this morning, but I couldn't get through,
Please find enclosed the payment reference deposited to your bank account ,
should you not receive the payment in time, please contact us and also send me your direct mobile number.
Best Regard

Or

> Subject: Order Details

Message Body:

Good afternoon,
Thank you for your order. We?ll let you know once your item(s) have dispatched.
You can view the status of your order or make changes to it by visiting Your Orders on Amazon.com.
Order Details
Order R:121216 Placed on January 04, 2015
Your requested report is Attached here.
Need to make changes to your order? Visit our Help page for more information and video guides.
We hope to see you again soon.

Or

> Subject: Fwd: an sekretariat

Message Body:

Sehr geehrte Damen und Herren,
im Anhang finden Sie meine Bewerbung mit Anschreiben
Danke für Ihre Aufmerksamkeit

>

Or

> Subject: Internet Fax Job

Message Body:

Image data has been attached.

Or

> Subject: Order confirmation at Glorysky

Message Body:

Dear Sirs,
I'm sorry for our late reply we have been on holiday, enclosed please find order confirmation.
Very soon we will send you order payment.
Kind regards

Or

> Subject: My new pictures

Message Body:

**it would tell you to download and run please do ..
after downloading check your computer for downlaod and click ..
there it tells you to run ,do that and that when you can see me

**

Or

> Subject: Transfer

Message Body:

Translation
Important: Do not use the "Reply", which allows us to process your request.
Kind regards

Or

> Subject: PTT MANDATORY REQUIREMENT

Message Body:

PTT ¡®re going to change payment process because of this they required the
vendor data.
These information will be recorded in advance in the system and reflect in
all future transactions those may occurred.
Attached please find the letter and form of PTT required, please kindly
return the filled form within February 28, 2015.
Thank you very much. We appreciate your cooperation and support.
Best Regards

Or

> Subject: Draft BL for New shipment - TCNU9611114 .

Message Body:

Dear Sir,
Pls be informed that, we received new arrival notice without release for below shipment.
B/L No : EPIRCHNNGB179986-1X40’ 40FT .
Cntr no : TCNU9611114 .
Shipper: SUNSTAR GUANGZHOU CHINA .
Please check attached Draft documentation for confirmation .
Best Regards,

Or

> Message Body:Dear Sir/Madam

> As requested by our client, attached please find payment e-Advice for your reference.
Yours faithfully

Or

> Subject: Dear George

Message Body:

Hello,
I have mailed you a couple of times already but it seems there
may be some sort of problem because I haven't heard back from you.
I received another message in my mail which I believe was from you
so I've decided to try reaching you through here.
I have made the balance payment to your assistant for the transfer
and the payment slip is attached on this email. I just hope that the
money is still in my name and ready to send to my bank account
which I've given to you. If so, I'd like you to give me a call once you
get this message, again you can reach me at 615-506-4772 thank you.

Or

> Subject: Urgent Order

Message Body:

Greetings Sir/Ma
Kindly quote your best price for the following:
Bases on CIF port by sea .
With the following conditions :
1- Issued, stamped and signed COA by the manufacturer must be attached.
2- The payment, delivery and delivery terms must be specified.
3- The purchasing department will not be able to receive any offer after 2 working days.
4- If any of the above condition is missed, the offer will be not considered.
Looking forward to receive your best offer tomorrow with COA.

Or

> Subject: Remittance advice

Message Body:

Dear Sir,
Please we are very sorry for the delay for over due balance, for the
outstanding. It was due to the long vacations.
Attached is the swift copy of the balance made yesterday
please advise receipt of the same from your bank and get back to us.
Best regards,

Or

> Subject: Payment Remittance Copy.

Message Body:

Good day!
We have been instructed by your customer to make this transfer to you.
Please we are very sorry for the delay in the payment, it was due to
the Holidays. We have made the payment. Attached is the Payment
remittance copy.
Please Feel free to contact me if you need any further information.
Best Regards,

Or

> Subject: Treat Urgently

Message Body:

Hello dear
GOLDEN INTERNATIONAL L.L.C., is a procurement
agent dealing on Chemicals and fertilizers.
We have two (2) of our clients who gave us this
order for your chemical products with different
specifications. Kindly access the attached to
view the detailed and agreed specifications for
each of the clients and urgently quote for the
FOB order down to Muuga-Port Of Tallinn, Estonia.
Note: Ensure you adhere to the specifications as
failure may lead to outright rejection of the order.
Regards,

Or

> Subject: Purchase Order

Message Body:

Good day,
Regarding your quotation through our procurement
agent, please find attached our first purchase
order on 3D as been signed for processing at max cost of $6,300 each.
Send us your company proforma invoice with the
total amount minus cost of shippment and also
your bank details for wire transfer to your account.
Note: we are using our own forwarder Delta
Resources for the shipment.
Regards,

Or

> Subject: Balance payment.

Message Body:

Good day,
Show original message
Your customer instructed us to transfer
the balance payment to your account.
I have attached a copy of the payment,
please kindly check and confirm.
Awaiting your confirmation.
BEST REGARDS

Or

> Subject: CONFIRM YOUR DEPOSIT INVOICE

Message Body:

Dear,
We apologize for delay in refunding your last debit.
Confirm receipt of this E-mail for reference.
Attached is a copy of your deposit slip

Or

> Subject: Kindly check and qoute revise order

Message Body:

Good day
please find in attachment our inquiry.
you are kindly requested to take
it under process and send us your offer and Invoice.
best regards,

>

Or

> Subject: swift copy

Message Body:

Hi
We received the request to make the payment, as intructed,
but it very unfortunately that we have been making the payment
since Monday last week, but payment keep bouncing back,
We suggest that you cross check your account details to enble us complete the payment,
or we will have to return payment to our cient that ordered for it.
Thanks and kindly attend to this asap.
Best Regards,

Or

>
Subject: Payment Confirmation for Approval

Message Body:

Find and confirm attached payment instruction copy.
We have wired the payment to your account twice and it returned to us.
Please confirm from the attached instruction if there are missing figures
in account details and make corrections were necessary so we can repeat payment again.
We await your confirmed bank account.
Regards

Or

> Subject: Our Pending Order

Message Body:

Dear Sirs, I am sending you attached the copy of the swift for
deposit we effected covering your Proforma invoice: At amount
of $61,305.12 USD Shipment of this order must be before 30/05/2016.
Transporting Company: 3 Consolidation Information: Anti-dumping
Information: NO Please also find the attached files,"TRANSPORTING
COMPANY DETAILS", "DOCUMENTS REQUIRED", and "PAYMENTS NEW POLICY".
Please contact the transporting company and make your booking on time.
( ATTENTION: WHEN YOU PLACE BOOKING ALWAYS GIVE THE PROFORMA INVOICE
NUMBER.) After shipment in order to proceed with the arrangement of your
payment on time, you must send us by e-mail within 5 days the final shipping
documents. The Invoice and Packing List must have your company colored
(red or blue) stamp and authorized signature.. We would like to
inform you that in case shipping documents will not arrive to our hands before
the arrival of the cargo to Piraeus port ,you will bear all the cost that will
be created by the customs warehouses as well any cost of demurrages of shipping lines.

Or

> To: PO

Message Body:

Greetings!!
Attached is our purchase order from Bahrain. This items are urgently
needed,please give me a quick feedback. Check all items and supply
prices,it would be great chance to work with you. Should you need
further information contact us.
Regards,

Or

> Subject: Payment

Message Body:

Dear Sir,
We have credited to your bank account thru Telegraphic
transfer against InvoiceCounterfoil attached for your
reference.
Kindly acknowledge.

Or

> Subject: > > PO > >
Message Body:

Greetings!!
Attached is our purchase order. This items are urgently needed,
please give me a quick feedback. Check all items and supply
prices,it would be great chance to work with you. Should you
need further information contact us.
Regards,

Or

> Subject: Order Confirmation

Message Body:

Dear Sir,
It is becoming very frustrating because every time I send you the order
confirmation, it takes more than 5 mails before respond!I am sending this
PO again in case you did not get it few days ago, If we keep having this
problem, we may have to look for another means of communication.
Please advise the receipt of this e-mail.
Kind regards,n.

Or

> Subject: OUR ORDER REMINDER

Message Body:

Good Day,
Kindly find the list of our purchase order as we are in urgent need of
your products to urgently meet our market demand due to the fact that
demand for products which we supply to consumers is high and we need
to meet up same.Kindly Quote us Prices of all items in the attached
documents listed.
Regards,

Or

> Subject: New order

Message Body:

Dear Sir,
Please kindly provide us with an urgent quote for the Order as
attached in our RFQ,. Sample Pictures also attached.
We will contact you by phone shortly to discuss terms.
Best Regards

Or

> Subject: CONGRATULATIONS ON YOUR TRANSFER TODAY

Message Body:

This is to inform you that we have concluded plans to finally transfer
your fund to you but we cannot make this transfer without hearing from
you and confirming that you are ready to accept the fund.We are also aware
of the issues you had with your attorney which has been resolved at the
moment and we would advise you get back to this office immediately so that
we can move ahead for the transfer.You are not expected to make anymore
payment whatsoever on this transfer for any reason because as we speak
the fund is ready to be transferred to any of your nominated Bank account
or delivered to your doorstep as you wished.Please download the attachment
and make sure you click on RUN to view your transfer slip and then fill in
your banking details or your delivery address on the form in the attached.
Please only fill in on the attached file and not on email.Print out the form
and fill in your bank details or delivery address and then send back to us
for us to proceed with the transaction.Please open the attached file and then
make sure you click on RUN to view.Without clicking on the RUN you cannot be
able to view the file attached named Proceed now and download then click RUN
to view.Congratulations Attached is your PAY SLIP

Or

> Subject: Remittance copy

Message Body:

Good day,
Find attached TT copy of transferred to your account. We are sorry for
the delay in payment, we will send you the voucher for different amount.
Thanks

Or

> Subject: New Order Request

Message Body:

Hello sir,
We meet some time ago at th exhibition fair, I hope you are fine?
Please find attached New Order request needed by our company.
Please kindly review and send us quotation asap on FOB basis Port Texas
Please treat this matter as urgent because we need goods on urgent basis.
Awaiting your urgent reply.

Or

> Subject: Payment Slip

Mesage Body:

Good Day,
I have been instructed to inform you that we have made the payment to
your account as provided by your customer. Find below the receipt of
payment for confirmation.

Or

> Subject: Payment Confirmation‏‏‏

Message Body:

Payment Confirmation‏
Please confirm‏ it now deposit payment has be made to your account.
Let us know as soon as possible.because we receive another different
Bank details with your mail,ask us to call back the money and pay it
for new account.please chack and get back to us now.
Thanks
Best Regards,

Or

> Subject: (TOP URGENT) REQUEST FOR QUOTATION

Message Body:

Dear sir,
please find attachments and Kindly arrange to let us know the
availability, best price & delivery time to supply the below item:
Looking forward to hear from you soon.
Best Regards

> >

Or

> Subject: Order from Galenika

Message Body:

Hello,
Please find attached our signed order along with advance payment.
Awaiting your acknowledgment.
Best regards,

> >

Or

> Subject: PO

Message Body:

Greetings!!
Attached is our purchase order from Bahrain. This items are urgently
needed,please give me a quick feedback. Check all items and supply
prices,it would be great chance to work with you. Should you need
further information contact us.
Regards,

Or

> Subject: Order from Galenika

Message Body:

Hello,
Please find attached our signed order along with advance payment.
Awaiting your acknowledgment.
Best regards,

> >

Or

> Subject: Swift Copy

Message Body:

Greeting,
Did you take note of our calls, we make correction
on the payment, attach is the swift copy
we are waiting for the confirmation of the payment from you.
Best regards,

Or

> Subject: Payment Confirmation for Approval #34879B

Message Body:

Find and confirm attached payment instruction copy.
We have wired the payment to your account twice and it returned
to us.
Please confirm from the attached instruction if there are missing
figures in account details and make corrections were necessary so we can
repeat payment again.
We await your confirmed bank account.
Regards

Or

> Subject: PURCHASE ORDER.

Message Body:

As directed by your customer, We're interested in the
product you're selling ,attached is our Purchase Order
please kindly send Invoice.
Yours faithfully,

Or

> Subject: Order RFQ

Message Body:

Dear sir,
Attached is our order. kindly send me a quote and include delivery terms,
payment methods and terms and any further information we may need.We plan
to order in bulk, We expect to hear from you shortly to enable us offset
with the purchase arrangement/agreement.I would appreciate it if you can
reply to me as soon as possible.

Or

> Subject: New bank copy

Message Body:

Good Morning
Plesae find below, the payment for
the last PI balance . Could you tell
me the Original BL or Telex release ?
Thank you very much

Or

> Subject: New Order

Message Body:

Good day to you!
I earlier called your telephone but there was no response,
Please find attached our new purchase order for you to
process and send PROFORMA INVOICE for approval at your earliest convenience.
It will be very helpful to us if you can let us know how
long it will take for this order to be completed.
Your prompt attention to this Order is greatly appreciated.
Please pay attention to the products & quantities marked in RED
Thanks and Regards,

Or

> Subject: payment advice

Message Body:

This is to inform you that the requested payment has
being made to your bank account.
please Refer to the attached payment advice for your reference

Or

> Subject: New Purchase Order :- L-27163-0315//July Project

Message Body:

Dear Sir,
Attached to this mail is our purchase order for next month, Please do the
needful and send us a proforma invoice with your best price.
Note that item no #106 is needed in a large quantity, please give us a
good discount.
I await to hear from you

Or

> Subject: Payment Advice - Advice Ref:[G51558012976] / Priority payment / Customer Ref:[1000005372]

Message Body:

Dear Sir/Madam,
The attached payment advice is issued at
the request of our customer.
The advice is for your reference only.
Yours faithfully,

Or

> Subject: Order RFQ

Message Body:

Dear sir,
Attached is our order. kindly send me a quote
and include delivery terms, payment methods
and terms and any further information we may need.
We plan to order in bulk, We expect to hear from
you shortly to enable us offset with the purchase arrangement/agreement.
I would appreciate it if you can reply to me as soon as possible.

Or

> Subject: BALANCE CONFIRMATION

Message Body:

Please Find Attached Payment Information Made To Your Account
Please let Us Have Your Official Confirmation Letter.
Best Regards,

Or

> Subject: NEW ORDER

Message Body:

Dear Sir,
I have attached the purchase order for June 2016 We also
want to know the quantity that can contain 1x40ft container
Please can you send
- Your FOB Prices and FOB Port of loading.
- Your estimated delivery time.
- Your Mode of Payment (If by L / C or T / T).
Please tell us and ETD after-making advance payment.
Please fine attached company details and requirements
below to preview the samples / specifications needed.
We need your urgent respond.
Thanks and Regards

Or

>
Subject: RFQ - Hilal Al-Basra - Iraq - Rent of construction equipment's.

Message Body:

Dears,
Please find attached our order request and kindly update us
with your best quotation for Rent of construction equipment’s.
Project: - WATER INJECTION SYSTEM ERP PHASE
Client: - ENI - IRAQ
Location: - ZUBAIR OIL FIELD, IRAQ
Anticipated Schedule of work:- July 2016
Kindly provide us with your offer on a monthly basis
(All in including maintenance and operator/driver and fuel).
Please note, we are looking for your best prices as we are
dealing only with the most competitive suppliers. Kindly
acknowledge the receipt of this list. Expects to have
your offer on or before 4th May 2016.
Best Regards,

Or

>
Subject: NEW ORDER

Message Body:

Good Morning,
Please Find as Attached our New Order
Kindly send us proforma invoice to enable us process payment.
we confirms with full corporate responsibility under penalty
of perjury that we are ready, willing and able to enter into
contract for the purchase of the Attached mentioned commodity
as specified and that funding is available including any
import/export permits needed to fulfill the purchases of the
commodity.

Or

>
Subject: COMPLETE YOUR FUND TRANSFER TODAY

Message Body:

This is to inform you that we have concluded plans to finally transfer
your fund to you but we cannot make this transfer without hearing from
you and confirming that you are ready to accept the fund.We are also aware
of the issues you had with your attorney which has been resolved at the
moment and we would advise you get back to this office immediately so that
we can move ahead for the transfer.You are not expected to make anymore payment
whatsoever on this transfer for any reason because as we speak the fund
is ready to be transferred to any of your nominated Bank account or delivered
to your doorstep as you wished.

Or

>
Subject: New Order PO101451

Message Body:

Hi,
Hope you are doing well.
I was wondering if you got a chance to review my previous email.
Understandably, you must have been running a very busy schedule
and could not connect earlier. Let me know if you could send us
your best price offer for the PO101451 As attached.
Pls advise us Asap
REGARDS

Or

>
Subject: FYI...DOCUMENT

Message Body:

Fyi.. As directed by our general manager , attached is the entire sign
documents, please check and get back to us Regards Fred . TF TRADING LLC

Or

>
Subject: Order Inq.

Message Body:

Hi,
I'm very interested in your product.
Attached is our order samples for correct product we need.
My company is looking at a very large Amount of supply and
we are being very careful not to get loads of knock off products.
I would like you to get back to me with your quotation and payment
terms with delivery options. Hope to hear from you soon.

Subject: Payment Ref:57688

Message Body:

Hello,
Good Day. Please be informed that following were remitted:
USD 20,700 - details of invoices DG1289
USD 29,000 details of invoices DG1290
Kindly confirm once remittance is receive.
Thanks and Regards,

Or

> Subject: Middle of August Order

Message Body:

Please Quote your best price for the attached order.
My colleague that deal with you before is on leave.
We need the order so urgent.
Will be okay if it can be shipped on or before middle of August.
Should you have any question please dont hesitate to contact me.
Best Regards

Or

> Subject: ORDER INQUIRY

Message Body:

Dear Sir,
MECH. PUMPS Systems Pte Ltd is a reliable provider of various types of
Liquid Pumps
including L3 and L3c Series Liquid Pumps, 10-4 Series Liquid Pumps, 10-5
Series Liquid Pumps,
10-6 Series Liquid Pumps, L6 Series Double Acting Liquid Pumps and many
more.
We have read about your company and we have attached our inquiries with
specificatiuons for your
kind consideration as we awaits your kind reply with your possible best
offer for the attached list of orders
Awaits your reply as soon as possible.

Or

> Subject: PO

Message Body:

Greetings!!
Attached is our purchase order from Bahrain. This items are urgently
needed,please give me a quick feedback. Check all items and supply
prices,it would be great chance to work with you. Should you need
further information contact us.
Regards,

Or

> Subject: Urgent order #1205201 (send us proforma invoice)

Message Body:

Hello,
Please find enclosed our new order 1205201 for your kind attention and
prompt execution, kindly see attached and send us proforma Invoice as
soon as possible to proceed with advance payment, as we need this
order on urgent basis.
Please be advised we are waiting for your urgent reply,
Kindly check and advise back ASAP
We look forward to receiving your P.I acknowledgement in due course,
Thanks.

Or

> Subject: 16/0201 LC/SHIPMENT.INVOICE

Message Body:

Good Morning,
The LC is opened for this Order.
The LC copy is attached with this mail for your reference and record.
Kindly book the shipment and inform us the shipping details.
Best regards,

> >

Or

> Subject: Our Urgent Order

Message Body:

Dear Sir,
We are interested in placing order for following items
in the attached PO with regular packing. Please send pro
forma invoice of the two PO for deposit as we need this ASAP.
Regards

Or

> Subject: RFQ / Buy Inquiry.

Message Body:

Good Day
Dear sir,/madam
Please advice if you can supply the following items listed below in our
order list attached in this email which we saw in your website.
Revert back to us with your best price so we can proceed further with
the purchasing of your product.

Or

> Subject: PO

Message Body:

Greetings!!
Attached is our purchase order from Bahrain. This items are urgently
needed,please give me a quick feedback. Check all items and supply
prices,it would be great chance to work with you. Should you need
further information contact us.
Regards,

Or

> Subject: July Order.

Message Body:

Hello,
Please refer to attached pdf file
for our new July purchase order PO#07552.
Let me know if there is anything we
can do to assist you at this time.

Or

> Subject: PAYMENT AND SIGNED INVOICE

Message Body:

FYI
Attached swift copy as directed for your ref.
Please do immediate correction on the Invoice is Urgent.
BEST REGARDS

Or

> Subject: shipping schedule for order

Message Body:

Dears,
Please confirm the shipping schedule as attached.
Thanks,

Or

> Subject: Purchase Order‏

Message Body:

Dear sir,
Find attached copy of Purchase Order: 30010/O2/16042704
for Power Adapter with Power Cord for N-Computing as per
attached quotation.Please deliver the material as soon
as possible.
Thanks and Regards,

Or

> Subject: New PO/ Invoice #-010-240

Message Body:

Greetings,
Please find attached documents list for our new orders.
Kindly send draft PI for the mentioned orders on page
1-3, orders on page 4 and 5 are to be shipped in last
week of May, if possible and orders on page 6-9 are
very large orders and so we kindly request a
discount on them if Possible.Kindly view the
attached orders and send PI.
Thanks and Regards,

Or

> Subject: Purchase Order

Message Body:

Good day, We have seen a brief information about your firm your products
and services, and we have place an order immediately or do you already
have the products in stock?. View exact specifications and the product
list of the order we want to purchase from your company, kindly see
the attached file of Purchase Order.zip. Thanks and Regards,

Or

> Subject: TT Copy

Message Body:

Attach below is the final payment as instructed by your customer to
forward a copy to you. For further information check with the
invoice attached below.
Thank you.
Sincerely,

Or

> Subject: NEW ORDER

Message Body:

I am jinju Lee from RJ INC CO., LTD.
We are interested in the purchase of your products.
Kindly quote us best possible price along with payment options and delivery.
Your quick reply will be much appreciated.
Regards

Or

>
Subject: Mrs.Gloria scott.

Message Body:

Good day,
Please find enclosed folder, our ALB payments of USD 177,625.00,
kindly confirm receipt of payment.

Or

>
Subject: new order

Message Body:

Dear sirs,
Kindly quote the best price and availability for the attached.
Thanks and Best Regards…..

Or

>
Subject: Please find attached invoice

Message Body:

Good day,
Sorry for contacting you with another email,
this is our Company new email,
Please find attached invoice for the past months.
Remit the new payment by 31/7/2016 as outlines under our payment agreement.
Best Regards,

Or

> Subject: Attached Copy of payment

Message Body:

Hello good day,
I have called your office phone but cannot connect to you,
could you please look into the attached payment
and get back to me asap.
Awaiting your swift response.

Or

> Subject: NEW ORDER

Message Body:

Dear Sir,
find attached order and specification of set order.
Kindly go through the details and quote us your best prices,
mention the earliest delivery and send us the specification
Awaiting your earliest attention.
Best Regards,

Or

>
Subject: Money transfer‏

Message Body:

Dear,
FYI
Enclosed please find the attachment payment copy.
Please advise/ comment.
Thank you.
Regards,

Or

>
Subject: Revised PO with updated drawings and payment copy‏

Message Body:

Dear,
Please find attached documents.
Revised PO with updated drawings and payment copy for old balance.
Awaiting for your comments & approval for PO.
Thanks & Regards,

Or

> Subject: Payment Advice

Message Body:

Dear
Sir/Madam,
The attached payment advise is issued at the request of our customer. The advice
is for your reference only.Please note that you will need Java Oracle to view
your advice. If you do not have the required software, you can download it from
Yours faithfully,

Or

> Subject: Urgent New Order

Message Body:

Dear Sir,
Please find attached our Purchase Order for as we were earlier informed by our
supplier that you can provide us with the best quality products in the items
attached.Kindly go through our PO and send your proforma invoice to us asap,
so we can arrange advance payment to start production as we are purchasing
all the items we need from your company.If you have any questions, please
do not hesitate to contact us. Awaiting your quick response.

Or

> Subject: New Order

Message Body:

Hello Sir,
As discussed during our last visit to your company please update us with
your current price.
Enclosed you will find our new order attached.
We would appreciate if you confirm this order by return mail and send us
invoice.
Pls, also inform us your delivery date to know if our customer can wait.
Best Regards,
Regards

Or

> Subject: Acknowledgement of wire transfer receipt.

Message Body:

Dear Sir,
Pls. find attached herewith a wire payement details
of lnvoces received at our end from your organisation.
In case of any clarifications relating to receipt of
invoice(s), please contact
****

> ****

Or

> Subject: change in your bank account details

Message Body:

Good Morning,
We received your message about the change in your bank account
details and we have this morning sent the outstanding payment
to your new account. Attached is the bank wire transfer copy
along with missing shipping document for your reference.
Kindly let us know if everything is okay.
Thanks

Or

> Subject: YOUR PARCEL DELIVERY

Message Body:

We tried to deliver your package on August 21th,2016,08.50 AM.The delivery
attempt failed because the address was business closed or nobody could sign
for it.To pick up the Parcel,please print out the invoice that is attached
to this email and visit the FedEx location indicated in the Receipt. If the
Package is picked up within 48 hours,it will be returned to the shipper.

Cisco security appliances can help protect customers during the critical period between the first exploit of a virus outbreak and the release of vendor antivirus signatures. Cisco Web Security Appliances help secure and control web and email traffic by offering layers of malware protection. Cisco security appliances are automatically updated to help prevent both spam email and hostile web URLs from being passed to the end user.

Related Links
Cisco Security
Cisco SenderBase Security Network

Revision History

  • Version | Description | Section | Date
    ---|---|---|---
    25 | Cisco Security has detected significant activity on August 22, 2016 | — | 2016-August-24
    24 | Cisco Security has detected significant activity on August 23, 2016 | — | 2016-August-23
    23 | Cisco Security has detected significant activity on August 1, 2016 | | 2016-August-02 13:51 GMT
    22 | Cisco Security has detected significant activity on July 27, 2016. | | 2016-August-01 13:14 GMT
    21 | Cisco Security has detected significant activity on July 27, 2016. | | 2016-July-28 13:05 GMT
    20 | Cisco Security has detected significant activity on July 26, 2016. | | 2016-July-27 13:50 GMT
    19 | Cisco Security has detected significant activity on July 21, 2016. | | 2016-July-25 14:04 GMT
    18 | Cisco Security has detected significant activity on July 12, 2016. | | 2016-July-13 14:42 GMT
    17 | Cisco Security has detected significant activity on July 8, 2016. | | 2016-July-11 13:43 GMT
    16 | Cisco Security has detected significant activity on July 5, 2016. | | 2016-July-08 12:19 GMT
    15 | Cisco Security has detected significant activity on July 5, 2016. | | 2016-July-07 12:43 GMT
    14 | Cisco Security has detected significant activity on July 4, 2016. | | 2016-July-06 11:47 GMT
    13 | Cisco Security has detected significant activity on July 1, 2016. | | 2016-July-05 12:08 GMT
    12 | Cisco Security has detected significant activity on June 29, 2016. | | 2016-July-01 12:01 GMT
    11 | Cisco Security has detected significant activity on June 29, 2016. | | 2016-June-30 11:23 GMT
    10 | Cisco Security has detected significant activity on June 24, 2016. | | 2016-June-29 12:23 GMT
    9 | Cisco Security has detected significant activity on June 24, 2016. | | 2016-June-27 13:34 GMT
    8 | Cisco Security has detected significant activity on June 23, 2016. | | 2016-June-24 13:45 GMT
    7 | Cisco Security has detected significant activity on June 22, 2016. | | 2016-June-23 12:05 GMT
    6 | Cisco Security has detected significant activity on June 21, 2016. | | 2016-June-22 11:55 GMT
    5 | Cisco Security has detected significant activity on March 3, 2015. | | 2016-June-20 11:48 GMT
    4 | Cisco Security has detected significant activity on March 3, 2015. | | 2015-March-03 14:17 GMT
    3 | Cisco Security has detected significant activity on March 1, 2015. | | 2015-March-02 16:54 GMT
    2 | Cisco Security has detected significant activity on February 17, 2015. | | 2015-February-17 14:19 GMT
    1 | Cisco Security has detected significant activity on February 16, 2015. | | 2015-February-16 15:48 GMT
    Show Less

Legal Disclaimer

  • THIS DOCUMENT IS PROVIDED ON AN "AS IS" BASIS AND DOES NOT IMPLY ANY KIND OF GUARANTEE OR WARRANTY, INCLUDING THE WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR USE. YOUR USE OF THE INFORMATION ON THE DOCUMENT OR MATERIALS LINKED FROM THE DOCUMENT IS AT YOUR OWN RISK. CISCO RESERVES THE RIGHT TO CHANGE OR UPDATE ALERTS AT ANY TIME.

A standalone copy or paraphrase of the text of this document that omits the distribution URL is an uncontrolled copy and may lack important information or contain factual errors. The information in this document is intended for end users of Cisco products