Threat Outbreak Alert RuleID20399: Email Messages Distributing Malicious Software on January 12, 2016

2016-01-12T13:19:04
ID CISCO-THREAT-42981
Type ciscothreats
Reporter Cisco
Modified 2016-01-12T13:19:04

Description

Medium

Alert ID:

42981

First Published:

2016 January 12 13:19 GMT

Version:

1

Summary

  • Cisco Security has detected significant activity related to spam email messages distributing malicious software.

Email messages that are related to this threat (RuleID20399 and RuleID20399KVR) may contain the following files:

Name | Size in Bytes | MD5 Checksum
---|---|---
S01ZS003- 1018 December 2015.doc
| 85,504
| 0x75ECEE3B8B353731CFE1878898E072EC
Invoice-1228407.doc | 85,504 | 0xD3E7873B41994E93F3371E6B6C6993D2
102836144.doc | 365,568 | 0xF20DE24643620E91C634271B50C6E756

The following text is a sample of the email message that is associated with this threat outbreak:

>
Subject: December bill for aman Luton

Message Body:

Regards
sig-centre

Or

>
Subject: Your latest invoice from UKFast No.1228407

Message Body:

Hi,
Thank you for choosing UKFast. Please find attached your latest invoice. You can also download it.
As you have chosen to pay by Direct Debit there's nothing more you need to do, payment will be taken on
or after the date stated on your invoice.
Should you have any queries relating to this invoice please raise an invoice query from within MyUKFast.
Alternatively you can contact us on 0845 458 3535.
Remember you can view all your invoices, set who should receive these alerts and much more all via MyUKFast.
Kind Regards

Or

>
Subject: We are processing your PC WORLD order (PCW1521248708)

Message Body:

Please do not reply to this email as it is automatically generated.
PC World
Dear Customer
We are now preparing your PC World order for delivery..
Your order number: PCW1521248708
Standard delivery (expect delivery by Friday 13 February 2015)
Small item(s)
Quantity Product code Product price Total
HP - Pavilion 23-p030na 23" Touchscreen All-in-One PC 1 104464 £ 689.99 £ 689.99
Cost of products and services £ 689.99
Cost of delivery Free
Total cost £ 689.99
VAT (included) £ 115.00
What happens next?
Your Pavilion 23-p030na 23" Touchscreen All-in-One PC will be prepared for dispatch and a further
email will be sent when we have your product tracking number (if applicable).
A courier will be delivering this item.
If you would like us to recycle your old product please take it to your local Currys or PC World
store – PCWorld store locator link.

Cisco security appliances can help protect customers during the critical period between the first exploit of a virus outbreak and the release of vendor antivirus signatures. Cisco Web Security Appliances help secure and control web and email traffic by offering layers of malware protection. Cisco security appliances are automatically updated to help prevent both spam email and hostile web URLs from being passed to the end user.

Related Links
Cisco Security
Cisco SenderBase Security Network

Revision History

  • Version | Description | Section | Date
    ---|---|---|---
    1 | Initial Release | | 2016-January-12 13:19 GMT
    Show Less

Legal Disclaimer

  • THIS DOCUMENT IS PROVIDED ON AN "AS IS" BASIS AND DOES NOT IMPLY ANY KIND OF GUARANTEE OR WARRANTY, INCLUDING THE WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR USE. YOUR USE OF THE INFORMATION ON THE DOCUMENT OR MATERIALS LINKED FROM THE DOCUMENT IS AT YOUR OWN RISK. CISCO RESERVES THE RIGHT TO CHANGE OR UPDATE ALERTS AT ANY TIME.

A standalone copy or paraphrase of the text of this document that omits the distribution URL is an uncontrolled copy and may lack important information or contain factual errors. The information in this document is intended for end users of Cisco products