Threat Outbreak Alert RuleID24019: Email Messages Distributing Malicious Software on July 29, 2016

Medium

Alert ID:

48295

First Published:

2016 July 29 16:05 GMT

Version:

1

Summary

• Cisco Security has detected significant activity related to spam email messages distributing malicious software.

Email messages that are related to this threat (RuleID24019) may contain the following files:

Name	Size in Bytes	MD5 Checksum
RFQ Requirements… (2).zip / RFQ Requirements…exe
753,664
0x32983AFC799202CECBA638412D08336C

The following text is a sample of the email message that is associated with this threat outbreak:

> Subject: Quotation Request From SBC General Trading & Contracting Company W.L.L. (Kuwait)??

Message Body:

Dear sales
God Morning to you
We are SBC General Trading & Contracting Company W.L.L. (Kuwait)
SBC General Trading and Contracting Co., W.L.L. (SBC) was established in
the state of Kuwait in 2005 and registered in the Kuwait Chamber of
Commerce No. 110508 to provide contracting and sub-contracting work for
mechanical, civil, electrical and instrumentation works as well as
general trading work.
We have in-hand proposal soliciting offers for urgent supply of the
attached requirements and specification, As been requested by our
customer, please kindly go through and give us your bottom price.
We request your kind collaborations for your most grand CFR price offer,
in united state dollar price basics,
With your best delivery time, mode of payment must be mentioned , when
submitting your quotations
Please quote CFR Port of Fahaheel Kuwait, as per attached requirements
and Specifications. We request you to send your quotations along, with
the mentioned certificates required in attached requirements details.
Please note: that this requirements is firm buying kindly provide your
quotes earlier
Your prompt feedback and offer will be highly appreciated
Best wishes,
MOHAMMED HASSAM
SBC GENERAL TRADING & CONTRACTING COMPANY W.L.L.
Office No. C5, 3rd floor
Ajial Mall, P.O. Box 46069
Code 64011
Fahaheel, Kuwait
Phone: (+965) 2392-5935
[email protected]

Cisco security appliances can help protect customers during the critical period between the first exploit of a virus outbreak and the release of vendor antivirus signatures. Cisco Web Security Appliances help secure and control web and email traffic by offering layers of malware protection. Cisco security appliances are automatically updated to help prevent both spam email and hostile web URLs from being passed to the end user.

Related Links
Cisco Security
Cisco SenderBase Security Network

Revision History

* Version	Description	Section	Date
1	Initial Release		2016-July-29 16:05 GMT
Show Less

---

Legal Disclaimer

• THIS DOCUMENT IS PROVIDED ON AN “AS IS” BASIS AND DOES NOT IMPLY ANY KIND OF GUARANTEE OR WARRANTY, INCLUDING THE WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR USE. YOUR USE OF THE INFORMATION ON THE DOCUMENT OR MATERIALS LINKED FROM THE DOCUMENT IS AT YOUR OWN RISK. CISCO RESERVES THE RIGHT TO CHANGE OR UPDATE ALERTS AT ANY TIME.

A standalone copy or paraphrase of the text of this document that omits the distribution URL is an uncontrolled copy and may lack important information or contain factual errors. The information in this document is intended for end users of Cisco products