Malicious Email – “Unpaid Invoice [xxxxx] attached”

By adrian.aylandsystemforce.co.uk In On April 01, 2015

---

We are seeing malicious emails titled similarly to:
“Unpaid Invoice [xxxxx]”
or
“Unpaid Invoice [80085] attached”
or
“Unpaid Invoice [08781] attached”
or
“Unpaid Invoice [40020] attached”
or
“Unpaid Invoice [85958] attached”

These contain a malicious .ZIP attachment usually containing a malicious .vbs file (named in such a way that it looks like a .DOC, .DOCX, .PDF, .XLS, .XLSX, .XML or similar file)

DO NOT open the attachment, instead please forward to virus.scan@systemforce.co.uk and then delete them.

---