2016 March 8 15:40 GMT
2016 March 10 13:11 GMT
Email messages that are related to this threat (RuleID21486 and RuleID21486KVR) may contain the following files:
Name | Size in Bytes | MD5 Checksum
INVD0922D.zip / statistics_56179860242.js
order_copy_A4283262.zip / readme_048181837.js | Not Available | 0xD3B8CA2B94B1B68C0D5E54599BEC78AF
MX62EDO201603018437955.zip / HR2874706473.js | Not Available | 0xFF45E6E4B95B5CAC4071BBF8B6A9D7E2
MX62EDO2016030139141.zip / KD2038701642.js | Not Available | 0x1D89BB7C7FACD7BDE4691D6A4E034152
document_invoice_322468.zip / message.090919030.js | Not Available | 0x1D89BB7C7FACD7BDE4691D6A4E034152
The following text is a sample of the email message that is associated with this threat outbreak:
> Subject: March Invoice
Attached is the November invoice.
> Subject: Delay with Your Order #A4283262, Invoice #79302558
Dear Valued Customer,
It is very unpleasant to hear about the delay with your order #A4283262,
but be sure that our department will do its best to resolve the problem.
It usually takes around 7 business days to deliver a package of this size to your region.
The local post office should contact your as soon as they will receive the parcel.
Be sure that your purchase will be delivered in
time and we also guarantee that you will be satisfied with our services.
Thank you for your business with our company.
> Subject: Emailing: MX62EDO 01.03.2016
Your message is ready to be sent with the following file or link
attachments: MX62EDO 01.03.2016 SERVICE SHEET
Note: To protect against computer viruses, e-mail programs may prevent
sending or receiving certain types of file attachments. Check your e-mail
security settings to determine how attachments are handled.
> Subject: Invoice
The attached document is a transaction payment
confirmation from GlobalMarketing Ltd.
Thank you for your business - we appreciate it very much.
Cisco security appliances can help protect customers during the critical period between the first exploit of a virus outbreak and the release of vendor antivirus signatures. Cisco Web Security Appliances help secure and control web and email traffic by offering layers of malware protection. Cisco security appliances are automatically updated to help prevent both spam email and hostile web URLs from being passed to the end user.
A standalone copy or paraphrase of the text of this document that omits the distribution URL is an uncontrolled copy and may lack important information or contain factual errors. The information in this document is intended for end users of Cisco products