Malicious Email – “Invoice (13\03\2015) for payment to” (various companies listed)

By adrian.aylandsystemforce.co.uk In On March 13, 2015

---

we are seeing malicious emails titled: “Invoice (13\03\2015) for payment to” followed by a varying company name, such as:

Invoice (13\03\2015) for payment to COBURG GROUP
Invoice (13\03\2015) for payment to SMART(J.)& CO(CONTRACTORS)
Invoice (13\03\2015) for payment to CHERKIZOVO GROUP(OJSC)
Invoice (13\03\2015) for payment to COBURG GROUP
Invoice (13\03\2015) for payment to R.E.A.HLDGS PLC
Invoice (13\03\2015) for payment to CLONTARF ENERGY PLC
Invoice (13\03\2015) for payment to ATLAS DEVLPMNT & SUPPORT SRVCS LTD
Invoice (13\03\2015) for payment to ARMOR DESIGNS INC
Invoice (13\03\2015) for payment to OROSUR MINING INC
Invoice (13\03\2015) for payment to AVANTI COMMUNICATIONS GROUP PLC
Invoice (13\03\2015) for payment to DRS DATA & RESEARCH SERVICES
Invoice (13\03\2015) for payment to MTI WIRELESS EDGE
Invoice (13\03\2015) for payment to TP5 VCT PLC
Invoice (13\03\2015) for payment to AFREN PLC
Invoice (13\03\2015) for payment to NATIONAL WESTMINSTER BANK

These contain a malicious .DOC, .DOCX, .XLS, .XLSX, or .XML attachment.

DO NOT open the attachment, instead please forward to virus.scan@systemforce.co.uk and then delete them.

---