Monday, 16 March 2015

Attached invoice from CMP ICI151586.PDF.ZIP cmpireland.com

Attached invoice from CMP cmpireland.com ICI151586.PDF.ZIP being spammed, this time they got it right :(

These emails aren't from these companies at all , they are just being used to make the email look more genuine, ie. from a real company.
Note
It's also worth remembering that the company itself  may not have any knowledge of this email and it's link(s) or attachment as it won't have come from their servers and IT systems but from an external bot net.

It's not advised to ring them as there won't really be anything they can do to help you.

Message Header::

From: "noreply@cmpireland.com" {noreply@cmpireland.com}
Subject: Attached invoice from CMP
Message Body:
Attachment: text/plain
 Attachment:
ICI151586.PDF.ZIP
Sha256 Hashes:
adc803df53cbf1ac0249d25d0c00c099ceea1ee9e6c8b80f1433e630236cda58 [1]

Malware Macro document information:
VirusTotal Report [1]
Hybrid Analysis Report [1]
Malwr Report: [1]


Cheers,
Steve

No comments: