Thursday, 2 April 2015

Outdated Invoice Sage Invoice

Outdated Invoice Sage Invoice... with a link to download a zip file...

Headers:
From: "Sage Invoice" {invoice@sage.com}
Subject: Outdated Invoice
Message body:
 Sage Account & Payroll

You have an outdated invoice from Sage Accounting that is ready for payment. To find out more details on this invoice, please follow the link bellow or click here to view/download your account invoice:

https://invoice.sage.co.uk/Account?065166=Invoice_090914.zip

If we hold any information about you which is incorrect or if there are any changes to your details please let us know by so that we can keep our records accurate and up to date. If you would like to update your records or see a copy of the information that we hold about you, you can contact us at Data Protection Officer, Sage (UK) Ltd, North Park, Newcastle-upon-Tyne, NE13 9AA or by email to digital@sage.com. If you request a copy of your information you will need to pay a statutory fee which is currently £10.

The contents of this email and any attachments are confidential. They are intended for the named recipient(s) only. If you have received this email in error please notify the system manager or the sender immediately and do not disclose the contents to anyone or make copies.

We have communicated this information with users as well, and we will continue to communicate with you through email as your transition continues.

The links in the email will download a Zip file...
https://www.hightail.com/download/e?phi_action=app/directDownload&fl=SWhZekZucVhVbTlFQlFJWjA4bnVnVE9yZWt5UmdteDRsUjJuWENHRzVZbz0
Inside the Zip file is a Windows Executable file:
Document_AQ0072119-WE.scr
Sha256 Hashes:
36da2346078e07901d4241481378d7d69aa9c1b1dc42a469e738d80daac5f3ce   [1]

Malware Anti-Virus Reports:
VirusTotal Report [1] (hits 8/57 Virus Scanners)
Cheers,Steve
Sanesecurity.com

No comments: