{"id":207,"date":"2016-01-12T10:21:25","date_gmt":"2016-01-12T10:21:25","guid":{"rendered":"http:\/\/blogs.bath.ac.uk\/it-status\/?p=207"},"modified":"2016-01-14T10:13:32","modified_gmt":"2016-01-14T10:13:32","slug":"four-current-phishing-attacks-all-contain-malware-12-january-2016","status":"publish","type":"post","link":"https:\/\/blogs.bath.ac.uk\/it-status\/2016\/01\/12\/four-current-phishing-attacks-all-contain-malware-12-january-2016\/","title":{"rendered":"Four current phishing attacks all contain malware, 12 January 2016"},"content":{"rendered":"

Delete any of the current spate of phishing emails which all contain malware. \u00a0\u00a0Please see the examples below so you know what to look out for.\u00a0 The malware act in different ways so get in touch with our IT Help if you did open any attachments<\/a>.<\/p>\n

Subject Lines<\/strong><\/p>\n

Subject: Past due report<\/p>\n

Subject: AQR Transaction (or some 3 other \u00a0capital letter reference)<\/p>\n

Subject: FXR Invoice (or some 3 other \u00a0capital letter reference)<\/p>\n

Subject: NS Transfer (or some other 1 or 2 capital letter reference)<\/p>\n

Subject: MD Transaction<\/p>\n

From Addresses<\/strong><\/p>\n

These change so we cannot provide a definitive list.\u00a0 We have provided examples below so you know what to look out for.<\/p>\n

 <\/p>\n

Attachment \u2013 Customer_PAST_DUE_DATE####.doc (331KB<\/p>\n

 <\/p>\n

________________________________________<\/p>\n

From: Micah Hutchinson [ducks@ducks.fr]<\/p>\n

Sent: 14 January 2016 06:24<\/p>\n

To: Recipient<\/p>\n

Subject: Fw: MD\u00a0 Transaction<\/p>\n

Good Day<\/p>\n

Please see the report in attachment. In order to avoid fine for delay you need to pay within 24 hours.<\/p>\n

Kindest regards<\/p>\n

Micah Hutchinson<\/p>\n

 <\/p>\n

-----Original Message-----<\/p>\n

From: Bob Hahn [mailto:Bob.Hahn@adams-burch.com]<\/p>\n

Sent: 11 January 2016 16:03<\/p>\n

To: recipient<\/p>\n

Subject: Past due report<\/p>\n

Importance: High<\/p>\n

 <\/p>\n

Please let me know when we can expect payment on the past due invoices. I attach it.<\/p>\n

 <\/p>\n

Thanks,<\/p>\n

 <\/p>\n

Bob Hahn | Solutions Salesperson<\/p>\n

 <\/p>\n

Bob.Hahn@adams-burch.com<\/p>\n

C:\u00a0 301-442-6970 | P: 301-276-2075 | F: 301-386-0275 www.adams-burch.com<\/p>\n

 <\/p>\n

-------------------------------------------------------------------------------------------------------<\/p>\n

 <\/p>\n

Attachement \u2013 RANDOM_STRING(13charcter).doc\u00a0 (229KB)<\/p>\n

 <\/p>\n

From: Cheyenne Juarez [sebraepe@aerotur.com.br]<\/p>\n

Sent: 12 January 2016 07:06<\/p>\n

To: Recipient<\/p>\n

Subject: Fw: AQR\u00a0 Transaction<\/p>\n

 <\/p>\n

Greetings<\/p>\n

 <\/p>\n

Please find the receipt enclosed with this email. The Transfer should appear on your bank in 48 hours.<\/p>\n

 <\/p>\n

Kind regards<\/p>\n

Cheyenne Juarez<\/p>\n

 <\/p>\n

-------------------------------------------------------------------------------------------------------<\/p>\n

Attachment - \u00a0random_string (10Character).doc (212KB)<\/p>\n

 <\/p>\n

 <\/p>\n

From: Galena Evans [opsscs.kolhapur@dtdc.com]<\/p>\n

Sent: 12 January 2016 05:59<\/p>\n

To: Recipient<\/p>\n

Subject: Fwd: FXR\u00a0 Invoice<\/p>\n

 <\/p>\n

Good Day<\/p>\n

 <\/p>\n

Please review the invoice attached to this email. The Transaction will be posted on your bank in one day.<\/p>\n

 <\/p>\n

Best regards<\/p>\n

Galena Evans<\/p>\n

 <\/p>\n

 <\/p>\n

 <\/p>\n

-------------------------------------------------------------------------------------------------------<\/p>\n

Attachment - \u00a0random_string (10Character).doc (237KB<\/p>\n

 <\/p>\n

 <\/p>\n

-----Original Message-----<\/p>\n

From: Shea Stone [mailto:purchases@dfwit.com]<\/p>\n

Sent: 12 January 2016 07:48<\/p>\n

To: Recipient<\/p>\n

Subject: NS Transfer<\/p>\n

 <\/p>\n

Hi<\/p>\n

 <\/p>\n

Please review the payment confirmation enclosed with this message. The Payment will be posted on your account within 24 hours.<\/p>\n

 <\/p>\n

Best regards<\/p>\n

Shea Stone<\/p>\n

 <\/p>\n","protected":false},"excerpt":{"rendered":"

Delete any of the current spate of phishing emails which all contain malware. \u00a0\u00a0Please see the examples below so you know what to look out for.\u00a0 The malware act in different ways so get in touch with our IT Help...<\/p>\n","protected":false},"author":276,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":"","jetpack_post_was_ever_published":false},"categories":[106],"tags":[60],"class_list":["post-207","post","type-post","status-publish","format-standard","hentry","category-phishing","tag-malware"],"acf":[],"jetpack_featured_media_url":"","_links":{"self":[{"href":"https:\/\/blogs.bath.ac.uk\/it-status\/wp-json\/wp\/v2\/posts\/207","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/blogs.bath.ac.uk\/it-status\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/blogs.bath.ac.uk\/it-status\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/blogs.bath.ac.uk\/it-status\/wp-json\/wp\/v2\/users\/276"}],"replies":[{"embeddable":true,"href":"https:\/\/blogs.bath.ac.uk\/it-status\/wp-json\/wp\/v2\/comments?post=207"}],"version-history":[{"count":0,"href":"https:\/\/blogs.bath.ac.uk\/it-status\/wp-json\/wp\/v2\/posts\/207\/revisions"}],"wp:attachment":[{"href":"https:\/\/blogs.bath.ac.uk\/it-status\/wp-json\/wp\/v2\/media?parent=207"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/blogs.bath.ac.uk\/it-status\/wp-json\/wp\/v2\/categories?post=207"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/blogs.bath.ac.uk\/it-status\/wp-json\/wp\/v2\/tags?post=207"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}