Products & Services
Support

Product Categories


Popular Downloads


Manage Software

How to Buy

For Home

Linksys Products Store
Linksys is now part of Belkin
Products for everyone

All Ordering Options

Training & Events Partners
Guest

Threat Outbreak Alert

Threat Outbreak Alert: Fake Shipping Order Information Email Messages on May 27, 2014

 
Threat Type:IntelliShield: Threat Outbreak Alert
IntelliShield ID:30681
Version:42
First Published:2013 September 06 19:46 GMT
Last Published:2014 May 28 12:54 GMT
Port: Not available
Urgency:Possible use
Credibility:Confirmed
Severity:Mild Damage
 
Version Summary:Cisco Security Intelligence Operations has detected significant activity on May 27, 2014.
 

Description
 
Cisco Security Intelligence Operations has detected significant activity related to spam email messages that claim to contain order shipment information from FedEx. The email message attempts to convince the recipient to open the link to view the order history page. However, the link redirects to a .zip file containing a malicious .exe file that, when executed, attempts to infect the system with malicious code.

Email messages that are related to this threat (RuleID2970KVR
and RuleID2970KVR_1) may contain any of the following files:

Order history page.zip
Order history page.pdf.exe
order_OR0Z667G99HRI3MHCN.PDF.zip
order_OR0Z667G99HRI3MHCN.PDF.exe
Order_R8759049859.zip
Order_R8759049859.pdf.exe
E-DOC_3676711491.P.zip
E-DOC_8598603289.P.xml.exe
Order Items.pdf.zip
Order Items.pdf.exe
invoiceCM0V9ORWJF23KX8PAP.PDF.exe
Order_Lists.pdf.zip
Order_Lists.pdf.exe
NEW ORDER.JPG.zip
NEW ORDER.JPG.SCR
Payroll_Report-PaymentOverdue_08364511.pdf.zip
Payroll_Report-PaymentOverdue.pdf.exe
Quotation.zip
Quotation.pdf.exe
Paketverfolgung.pdf.exe
Swift copy.pdf.zip
Swift copy.pdf.scr
Paketverfolgung.pdf.exe
hot_deal_672f.zip
Hot_deals177230.pdf.exe
DHL-C76B14AB9E.zip
DHL_Delivery_Info_ID_FF00000000745687126348975.pdf.exe
67897867457798-657898785678o.pdf.zip
67897867457798-657898785678o.pdf.exe
DHL_Report_ID-9EE5CA6517.zip
DHL_Report_PDF_ID_40875349856023932409583.pdf.exe
Royal-Mail_C96B803AC2.zip
RoyalMailGroup_MailReport_id-238472349872.pdf.exe
Royal-Mail_0DAE91BA62.zip
RoyalMail_report_id947869378568273984792.pdf.exe
Royal-Mail_E5D12959B3.zip
RG940144742.zip
RG098653308.pdf.exe
fax.zip
fax.pdf.exe
MasterCard_87B0B9B914.zip
PDF_MasterCard_93845639563972567385623745687239465263947672364987234.pdf.exe
MasterCard_86CB918E22.zip
MasterCard_D746E9384B.zip
MasterCard_PDF_438957985730294652309750692346091234697132691264923940.pdf.exe
Royal-Mail_E5D12959B3.zip
RoyalMail-report-4379563495623597634597843.pdf.exe
RG940144742.zip
RG098653308.pdf.exe
fax.zip
fax.pdf.exe
MasterCard_87B0B9B914.zip
PDF_MasterCard_93845639563972567385623745687239465263947672364987234.pdf.exe
MasterCard_86CB918E22.zip
MasterCard_info_pdf_34857348957239509857928472.pdf.exe
MasterCard_D746E9384B.zip
MasterCard_PDF_438957985730294652309750692346091234697132691264923940.pdf.exe
O2 bill 04.12.13 629931.zip
O2 bill 04.12.13 880594.pdf.exe
897041-05122013.zip
090321-05122013.jpeg.exe
Employer_Bulletin_Issue_45_86F808BB81.zip
Employer_Bulletin_Issue_45_00000008089234.pdf.exe
Employer-Bulletin_Issue_45_5BDA559904.zip
Employer_Bulletin_Issue_45_UK_934857934587345.pdf.exe
Reference information_Doc_32443925283.zip
Reference information_Doc_56883990024.pdf.exe
fedex_tracking_results.zip
Track_shipments_FedEx_Office_orders_number_938475r7f9sdh8wf.doc.exe

ProductSample.zip
ProductSample.pdf.exe  
Puchase order.pdf.zip
Puchase order.pdf.scr

GB1673611.zip
GB10032014.pdf.scr

Order Complete.pdf.scr
rm_EC6F9A2D12.zip
Deliery_info_7383461243.pdf.exe
Shipment Schedule.jpg.zip
Shipment Schedule.jpg.exe
Revised PI.jpg.zip
Revised PI.jpg.exe
PO 760821.zip
PO 760821.PDF.scr
14-04-11 Liguria_ piano del ferro Porto Genova.zip
14-04-11 Liguria_ piano del ferro Porto Genova.pdf .exe
Contract Details pdf.zip
Contract Details pdf.exe
Invoice_22.04.2014.doc.zip
Invoice_22.04.2014.doc.scr
Duplicato_Fattura_9340065915_del_3-14.pdf.zip
Duplicato_Fattura_0546783341_del_3-14.pdf.exe

Approval Required Form Y7364FGDi.PDF.zip
Approval Required Form Y7364FGDi.PDF.exe
report_8873.pdf.exe
report.zip
report_9983.pdf.exe

2014-05 rechnung.3415314431.zip
2014-05 rechnung.9847559832.PDF.exe

The Order history page.pdf.exe file in the Order history page.zip archive has a file size of 121,344 bytes. The MD5 checksum, which is a unique identifier of the executable, is the following string: 0xE19529448343B675A496DC8416DB8966

A variant of the Order history page.pdf.exe file in the Order history page.zip attachment has a file size of 121,344 bytes. The MD5 checksum is the following string: 0x9828FA2B5896C7A7F417CF2CE5451CE1

The order_OR0Z667G99HRI3MHCN.PDF.exe file in the order_OR0Z667G99HRI3MHCN.PDF.zip attachment has a file size of 205,505 bytes. The MD5 checksum is the following string: 0xEAA6F16D014E430C2CF9993DF42044FD

The Order_R8759049859.pdf.exe file in the Order_R8759049859.zip attachment has a file size of 98,005 bytes. The MD5 checksum is the following string: 0x3B3C3CC09ECAE8ED63EDA9FB4D4E94B5

A third variant of the Order history page.pdf.exe file in the Order history page.zip attachment has a file size of 124,416 bytes. The MD5 checksum is the following string: 0x572CF475890855E6BB87E9D6CAB880A4

The E-DOC_8598603289.P.xml.exe file in the E-DOC_3676711491.P.zip attachment has a file size of 89,813 bytes. The MD5 checksum is the following string: 0x99ED92C484F3417BA29B3C7B7EA4D862

A fourth variant of the Order history page.pdf.exe file in the Order history page.zip attachment has a file size of 127,488 bytes. The MD5 checksum is the following string: 0x85961C1CF49B49CCC76AFB5F5F4490BE

A fifth variant of the Order history page.pdf.exe file in the Order history page.zip attachment has a file size of 130,560 bytes. The MD5 checksum is the following string: 0x3257EF1ECD8A9D4AF1D04A83B58B4999

A sixth variant of the Order history page.pdf.exe file in the Order history page.zip attachment has a file size of 130,560 bytes. The MD5 checksum is the following string: 0x57D5D2DAF4F6BEE0B5769F7EB182C3EA

The Order Items.pdf.exe file in the Order Items.pdf.zip attachment has a file size of 963,602 bytes. The MD5 checksum is the following string: 0x0766310F5CDB3CE820FE5F38062D4D5B

A seventh variant of the Order history page.pdf.exe file in the Order history page.zip attachment has a file size of 132,096 bytes. The MD5 checksum is the following string: 0x247B485E5DAA6A2BEBEA2E89DFB7B7CD

An eighth variant of the Order history page.pdf.exe file in the Order history page.zip attachment has a file size of 133,120 bytes. The MD5 checksum is the following string: 0x4D256283AC0055CDB91F8B3D0DBD18DF

The invoiceCM0V9ORWJF23KX8PAP.PDF.exe file has a file size of 171,261 bytes. The MD5 checksum is the following string: 0x015E60D0DDFF09D7DF66D926D3793CC8

The Order_Lists.pdf.exe file in the Order_Lists.pdf.zip attachment has a file size of 931,778 bytes. The MD5 checksum is the following string: 0x16F6A9DB16556F49D9425B204957D98A

A ninth variant of the Order history page.pdf.exe file in the Order history page.zip attachment has a file size of 37,888 bytes. The MD5 checksum is the following string: 0x6613DD4C9C1DB4210B75F6D3C35EFAF5

The NEW ORDER.JPG.SCR file in the NEW ORDER.JPG.zip attachment has a file size of 1,130,423 bytes. The MD5 checksum is the following string: 0x8BE3DB5BF51D2C4FB0009E77494D2D27

The Payroll_Report-PaymentOverdue.pdf.exe file in the Payroll_Report-PaymentOverdue_08364511.pdf.zip attachment has a file size of 128,313 bytes. The MD5 checksum is the following string: 0x68855CC754481CBC27D2805E9D4746B7

The Quotation.pdf.exe file in the Quotation.zip attachment has a file size of 349,185 bytes. The MD5 checksum is the following string: 0xC94673E5E454493709C7EB7FFBDABE5A

A 10th variant of the Order history page.pdf.exe file in the Order history page.zip attachment has a file size of 50,688 bytes. The MD5 checksum is the following string: 0x9743319852D86CBA07A3813304E94B4A

The Paketverfolgung.pdf.exe file has a file size of 409,600 bytes. The MD5 checksum is the following string: 0x9DDB7DAED7CA6421B6A1012194029A21

A variant of the Paketverfolgung.pdf.exe file has a file size of 417,792 bytes. The MD5 checksum is the following string: 0x60C69E5CE7060FEDF3E513D70AE71E7D

The Swift copy.pdf.scr file in the Swift copy.pdf.zip attachment has a file size of 471,786 bytes. The MD5 checksum is the following string: 0x00282904E34B60C06D28E79476CC5AE2

The Paketverfolgung.pdf.exe file has a file size of 421,888 bytes. The MD5 checksum is the following string: 0x0EA8D068CF0D252A27DA755A5C20447F

The Hot_deals177230.pdf.exe file in the hot_deal_672f.zip attachment has a file size of 489,099 bytes. The MD5 checksum is the following string: 0x304E57A8CD38336A188EF269DDAD3FF9

An 11th variant of the Order history page.pdf.exe file in the Order history page.zip attachment has a file size of 29,184 bytes. The MD5 checksum is the following string: 0x6FBBEAE3E5D5797D806A162AD0F2A842

The DHL_Delivery_Info_ID_FF00000000745687126348975.pdf.exe file in the DHL-C76B14AB9E.zip attachment has a file size of 151,552 bytes. The MD5 checksum is the following string:
0xD389CACFE1BBC4BA1BF96ADDE6516E92

The 67897867457798-657898785678o.pdf.exe file in the 67897867457798-657898785678o.pdf.zip attachment has a file size of 141,975 bytes. The MD5 checksum is the following string:
0x34BCF853A25CF0005F0A864D71B4AD3D

The DHL_Report_PDF_ID_40875349856023932409583.pdf.exe file in the DHL_Report_ID-9EE5CA6517.zip attachment has a file size of 131,072 bytes. The MD5 checksum is the following string: 0xE97638271DEDB57AC4159BE86BD4FD27

The RoyalMailGroup_MailReport_id-238472349872.pdf.exe file in the Royal-Mail_C96B803AC2.zip attachment has a file size of 90,726 bytes. The MD5 checksum is the following string: 0xD55DE5E9EC25A80DDFECFB34D417B098

The RoyalMail_report_id947869378568273984792.pdf.exe file in the Royal-Mail_0DAE91BA62.zip attachment has a file size of 90,112 bytes. The MD5 checksum is the following string: 0xFA0375459A177FBA2EC4BE0C22ACE737

The RoyalMail-report-4379563495623597634597843.pdf.exe file in the Royal-Mail_E5D12959B3.zip attachment has a file size of 115,001 bytes. The MD5 checksum is the following string: 0x1913D9E13B3D9EA113EBEF4E6B253EA8

The RG098653308.pdf.exe file in the RG940144742.zip attachment has a file size of 188,416 bytes. The MD5 checksum is the following string: 0x7E723C86FCB902CD3644129145107AA0

The fax.pdf.exe file in the fax.zip attachment has a file size of 81,920 bytes. The MD5 checksum is the following string: 0xEDCB1EC822CD1840FF9B6F21D4F0F798

The PDF_MasterCard_93845639563972567385623745687239465263947672364987234.pdf.exe file in the MasterCard_87B0B9B914.zip attachment has a file size of 90,112 bytes. The MD5 checksum is the following string: 0xF98F1F484F230D305DAC367A784E25BA

The MasterCard_info_pdf_34857348957239509857928472.pdf.exe file in the MasterCard_86CB918E22.zip attachment has a file size of
131,072 bytes. The MD5 checksum is the following string: 0x59AD1B76120C3E0BE81F7FCA70FDCC6D

The MasterCard_PDF_438957985730294652309750692346091234697132691264923940.pdf.exe file in the MasterCard_D746E9384B.zip attachment has a file size of 86,329 bytes. The MD5 checksum is the following string: 0x891152EFE8E4E7E1B7268C120B24CE34

The O2 bill 04.12.13 880594.pdf.exe file in the O2 bill 04.12.13 629931.zip attachment has a file size of 73,728 bytes. The MD5 checksum is the following string: 0x63AB93E7E7FCC53DE8A5E78BE6987E36

The 090321-05122013.jpeg.exe file in the 897041-05122013.zip attachment has a file size of 71,680 bytes. The MD5 checksum is the following string: 0x76A4FA28AB51B05488571BFA9581D6EE

The Employer_Bulletin_Issue_45_00000008089234.pdf.exe file in the Employer_Bulletin_Issue_45_86F808BB81.zip attachment has a file size of 106,496 bytes. The MD5 checksum is the following string: 0x5FD8A7CBC05927CA4B73D97EAEE2BC14

The Employer_Bulletin_Issue_45_UK_934857934587345.pdf.exe file in the Employer-Bulletin_Issue_45_5BDA559904.zip attachment has a file size of 131,214 bytes. The MD5 checksum is the following string: 0x4F2D653FCE55909305B9A3A65CACB686

The Reference information_Doc_56883990024.pdf.exe file in the Reference information_Doc_32443925283.zip attachment has a file size of 68,264 bytes. The MD5 checksum is the following string: 0x3B96D464A5531FADCB8FE2BE5573DD96

The Track_shipments_FedEx_Office_orders_number_938475r7f9sdh8wf.doc.exe file in the fedex_tracking_results.zip attachment has a file size of 134,144 bytes. The MD5 checksum is the following string: 0x3F02D2C91095398631F869EB05E27387

The ProductSample.pdf.exe file in the ProductSample.zip attachment has a file size of 1,141,312 bytes. The MD5 checksum is the following string: 0xB274E9129B25AC3E310A1A79E721090C

The Puchase order.pdf.scr file in the Puchase order.pdf.zip attachment has a file size of 1,202,176 bytes. The MD5 checksum is the following string: 0x10FC2FDF969ED1999D26CCBAEE12F695


The GB10032014.pdf.scr file in the GB1673611.zip attachment has a file size of 18,432 bytes. The MD5 checksum is the following string: 0x6BB480042717ECBFF1EB2680FACBF1F3

The Order Complete.pdf.scr file has a file size of 844,288 bytes. The MD5 checksum is the following string: 0x3F6ED0C2C31E4F65486058F2AB1B49BA


The Deliery_info_7383461243.pdf.exe file in the rm_EC6F9A2D12.zip attachment has a file size of 110,592 bytes. The MD5 checksum is the following string: 0x3F54A5BBAD1B63263135DC97037447E1

The Shipment Schedule.jpg.exe file in the Shipment Schedule.jpg.zip attachment has a file size of 1,265,152 bytes. The MD5 checksum is the following string: 0x621271958C2222E38F81DA561895C5B9

The NF-PDF.cpl in the NOTA-FISCAL-ELETRONICA.zip file has a file size of 1,530,880 bytes.The MD5 checksum is the following string: 0x295AF7EB37774ECA2E79A42510C6360E

The PO 760821.PDF.scr file in the PO 760821.Zip attachment has a file size of 710,144 bytes. The MD5 checksum is the following string: 0x08BA043FE0330564FB1EBF7BDE58BFC5

The 14-04-11 Liguria_ piano del ferro Porto Genova.pdf .exe in the 14-04-11 Liguria_ piano del ferro Porto Genova.zip file has a file size of 1,824,256 bytes. The MD5 checksum is the following string: 0x23465C556F1F1F7C755ECE8767E55DAE

The Contract Details pdf.exe in the Contract Details pdf.zip file has a file size of 1,160,963 bytes. The MD5 checksum is the following string: 0xFD2E929C13532CB3D55D1B8442B91DBA


The Invoice_22.04.2014.doc.scr file in the Invoice_22.04.2014.doc.zip attachment has a file size of 89,600 bytes. The MD5 checksum is the following string: 0x4001247B8D58A8A834522A628562929D

The Duplicato_Fattura_0546783341_del_3-14.pdf.exe in the Duplicato_Fattura_9340065915_del_3-14.pdf.zip file has a file size of 231,360 bytes. The MD5 checksum is the following string: 0xFE719993A4A1A933A7727E660BA7815D

The Approval Required Form Y7364FGDi.PDF.exe file in the Approval Required Form Y7364FGDi.PDF.zip attachment has a file size of 94,208 bytes. The MD5 checksum is the following string: 0x4B7B35A054B652932FBCBDFEF3CFC7A4

The report_8873.pdf.exe file in the report.zip attachment has a file size of 94,208 bytes. The MD5 checksum is the following string: 0xB680FC3EA871868DEE004FA123F60856

The report_9983.pdf.exe file in the report.zip attachment has a file size of 98,304 bytes. The MD5 checksum is the following string: 0x83F1E346A94EB1959B77E6E65D3A9BBA


The 2014-05 rechnung.9847559832.PDF.exe file in the 2014-05 rechnung.3415314431.zip attachment has a file size of 194,568 bytes. The MD5 checksum is the following string: 0x242CE522D7B0D26C408B875B5B6CE371

The following text is a sample of the email message that is associated with this threat outbreak:

Message Body:

This is to confirm that one or more items in your order has been shipped. Note that multiple items in an order may be shipped separately.
You can review complete details of your order on the Order History page
Thanks for choosing FedEx.
Order Confirmation Number: 3981547
Order Date: 09/05/2013
Redemption Item Quantity Tracking Number
Paper, Document 2 <
fedex.com Follow FedEx: Facebook - Link will open in a new window Twitter - Link will open in a new window YouTube - Link will open in a new window
You may receive separate emails with tracking information for reward ordered.
My FedEx Rewards may be modified or terminated at any time without notice. Rewards points available for qualifying purchases and certain exclusions apply. For details and a complete listing of eligible products and services please read My FedEx Rewards Terms and Conditions .
©2012 FedEx. The content of this message is protected by copyright and trademark laws under U.S. and international law. Review our privacy policy . All rights reserved

Or

Subject: Your Rewards Order Has Shipped

Message Body:

This is to confirm that one or more items in your order has been shipped. Note that multiple items in an order may be shipped separately.
You can review complete details of your order on the Order History page
Thanks for choosing FedEx.
Order Confirmation Number: 3387403
Order Date: 09/09/2013
Redemption Item Quantity Tracking Number
Paper, Document 2 <
fedex.com Follow FedEx: Facebook - Link will open in a new window Twitter - Link will open in a new window YouTube - Link will open in a new window
You may receive separate emails with tracking information for reward ordered.
My FedEx Rewards may be modified or terminated at any time without notice. Rewards points available for qualifying purchases and certain exclusions apply. For details and a complete listing of eligible products and services please read My FedEx Rewards Terms and Conditions .
Š2012 FedEx. The content of this message is protected by copyright and trademark laws under U.S. and international law. Review our privacy policy . All rights reserved.

Or

Subject: Order Acknowledgement HMJHLJH788HMJHLJH675

Message Body:

We acknowledge & confirm your order for 3apolicyholdersupport_r2@geicomail.com, as follows:
Find herewith the attached order invoice HMJHLJH788HMJHLJH675 .
Regards,
Isabella Taylor
Sales Co-ordinator
Industrial Estate PVT. LTD.

Or

Subject: RELEASE : SEC-Order 50291039

Message Body:

DEFERRED ORDER RELEASED
Please refer to attached file for order details
This is automated email. Please do not reply.
PayPoint.net

Or

Subject: Payment Authentication Receipt - DO NOT REPLY TO THIS E-MAIL

Message Body:

Thank you for your payment. Please keep this email as a record for your accounts and refer to attached file for account and payment details

Or

Subject: Your Rewards Order Has Shipped

Message Body:

This is to confirm that one or more items in your order has been shipped. Note that multiple items in an order may be shipped separately.
You can review complete details of your order on the Order History page
Thanks for choosing FedEx.
Order Confirmation Number: 9758468
Order Date: 09/22/2013
Redemption Item Quantity Tracking Number
Paper, Document 16 <
fedex.com Follow FedEx: Facebook - Link will open in a new window Twitter - Link will open in a new window YouTube - Link will open in a new window
You may receive separate emails with tracking information for reward ordered.
My FedEx Rewards may be modified or terminated at any time without notice. Rewards points available for qualifying purchases and certain exclusions apply. For details and a complete listing of eligible products and services please read My FedEx Rewards Terms and Conditions .
©2012 FedEx. The content of this message is protected by copyright and trademark laws under U.S. and international law. Review our privacy policy . All rights reserved.

Or

Message Body:

Dear Sirs,
How are you? Depar Solar is dedicated to total customer satisfaction. Professional engineering with high quality solar pv products, premier contract services, and unmatched service support, Depar Solar’s corporate culture is dedicated to ensure your complete satisfaction with Depar Solar and high quality products of well-known global partners.
we are interested in your products,can you send us asap your best price offer with possible discounts?as to provide for our customers.meanwhile i did wish you can prompt us with your price offer asap as to send to our customer for guide in their orderi will await your response
Please its urgent Best regards,Mr. Omer Muhtaroglu, Adres: Anadolu Blv.145.sk.10/47-48Macunkoy 06370 Ankara Turkey TEL: +90.312.3977236 email: info@deparsolar.com

Or

Subject: Your Rewards Order Has Shipped

Message Body:

This is to confirm that one or more items in your order has been shipped. Note that multiple items in an order may be shipped separately.
You can review complete details of your order on the Order History page
Thanks for choosing FedEx.
Order Confirmation Number: 0622769
Order Date: 09/26/2013
Redemption Item Quantity Tracking Number
Paper, Document 16 <
fedex.com Follow FedEx: Facebook - Link will open in a new window Twitter - Link will open in a new window YouTube - Link will open in a new window
You may receive separate emails with tracking information for reward ordered.
My FedEx Rewards may be modified or terminated at any time without notice. Rewards points available for qualifying purchases and certain exclusions apply. For details and a complete listing of eligible products and services please read My FedEx Rewards Terms and Conditions .
2012 FedEx. The content of this message is protected by copyright and trademark laws under U.S. and international law. Review our privacy policy . All rights reserved.

Or

Subject: UPS Delivery Notification Tracking Number : NLGDJEH673NLGDJEH977

Message Body:

Package delivery confirmation invoice NLGDJEH673NLGDJEH977
Thank you,
United Parcel Service
*** This is an automatically generated email, please do not reply ***
© 2013 United Parcel Service. UPS

Or

Subject: Message copied from system quarantine

Message Body:

The attached message was forwarded from an IronPort system quarantine,
and may contain a virus, spam, or other prohibited content.
Good day Sir/madam
We were been refereed to you by our business contact.
We are in search of a regular and stable supplier,we need large supply
from your company.
Can your company supply within 40 days?
Please give us your best quote on the items as attached.
Kindly see attached files for your perusal?
Regard
Sumesta

Or

Subject: FROM KUWAIT CAMBER OF COMMEREC‏

Message Body:

Dear Sir/Madam
Kindly find attached our order
Attached is our order valuing U$52,000.- by C&F EGPYT.
i hope you keep our order with top priority and wish you do your best to make good quality and delvery.
IMPORTANT: Please kindly note that your Invoice must be dated at least 1 day before shipment date. This is a requirement from our Customs. If not complying it, we will not be able to have the shipment from Customs. So we will appreciate you to arrange accordingly.
Please advice your shipping date,as we will appreciate shipment between 18 nov
Kindly confirm order and advice
I await your invoice for order
Thank you & Best regards,
Looking forward to your reply.
Mohamed M. Shabrawi
Alzeina Tissue Mill Co.,
Tel: +2015412816
Fax: +2015412817 - EX. 255
Mobile: +201224951999
+201288799927
E-Mail: moye@moyeotomotiv.com
WEB SITE : www.moyeotomotiv.com
Address: A6 - 3rd industrial zone
10th of Ramadan city - Sharkia

Or

Subject: Payment Overdue - Please respond (Payment ID:73623518552681)

Message Body:

Please find attached payroll reports for the past months. Remit the new
payment by 07/11/2013 as outlines under our payment agreement.
Payment ID:73623518552681
Sincerely,
Sandra Wang

Or

Message Body:

Dear Sir / madam,
We would like to inquire about your company products ,
Please kindly check list of our requested products and quote your prices and
send us your quotation specifications ASAP
Do check the attached file to enable you give us your best quotes.
Your immediate reply with your quote after view our attached will be much appreciated.
Thanks
best regards
marketing manager(department)
Mr.Charles Benson

Or

Subject: RE: Post an mich 1

Message Body:

Hier werden Ihre Tracking-Nummern.

Or

Subject: original BL of the shipment

Message Body:

Hello,
My client asked me to forward you bank swift copy. please check attached
and send original BL of the shipment.
Best Regards
Reza Galavi

Or

Subject: RE: Post an mich 1

Message Body:

Sie fragen mich, wie. Hier werden Ihre Tracking-Nummern.

Or

Message Body:

Cheap Holidays & Breaks for 2013-2014 with The Co-operative Travel
The Co-operative Travel are specialists in making sure your holiday is everything you have dreamed of and we have thousands of great deals and discounts available to ensure you get the break you deserve. Join now avaible great
deals and save about 40-60 % !
Tenerife - from 120 pounds
Fuerteventura - from 130 pounds
Gran Canaria - from 180 pounds
More avaible destinations are in attached file. Try and win FREE transfer !
Thomas Cook Retail Limited
Registered office:
The Thomas Cook Business Park
Coningsby Road
Peterborough
PE3 8SB
Company Registration Number: 00102630 We are a member of ABTA with membership number J9375

Or

Subject: Fwd: Your Rewards Order Has Shipped

Message Body:

This is to confirm that one or more items in your order has been shipped. Note that multiple items in an order may be shipped separately.
You can review complete details of your order on the Order History page
Thanks for choosing FedEx.
Order Confirmation Number: 1667549
Order Date: 11/18/2013
Redemption Item Quantity Tracking Number
Paper, Document 16 <
fedex.com Follow FedEx: Facebook - Link will open in a new window Twitter - Link will open in a new window YouTube - Link will open in a new window
You may receive separate emails with tracking information for reward ordered.
My FedEx Rewards may be modified or terminated at any time without notice. Rewards points available for qualifying purchases and certain exclusions apply. For details and a complete listing of eligible products and services please read My FedEx Rewards Terms and Conditions .
©2012 FedEx. The content of this message is protected by copyright and trademark laws under U.S. and international law. Review our privacy policy . All rights reserved.

Or

Subject: Delivery Status ID_C76B14AB9E

Message Body:

Dear customer,
We attempted to deliver your item at 10:10 AM on Nov 24th, 2013.
The delivery attempt failed because nobody was present at the shipping address, so this notify has been automatically sent.
If the parcel is not scheduled for redelivery or picked up within 72 hours, it will be returned to the sender.
Label Number: C76B14AB9E
Expected Delivery Date: Oct 24th, 2013
Class: Package Services
Service(s): Delivery Confirmation
Status: eNotification sent
Read the enclosed file for details.
Thank you,
(c) 2013 Copyright DHL Inc 2013. All Rights Reserved.
*** This is an automatically generated email, please do not reply ***

Cisco Security Intelligence Operations analysts examine real-world email traffic data that is collected from over 100,000 contributing organizations worldwide. This data helps provide a range of information about and analysis of global email security threats and trends. Cisco will continue to monitor this threat and automatically adapt systems to protect customers. This report will be updated if there are significant changes or if the risk to end users increases.

Cisco security appliances protect customers during the critical period between the first exploit of a virus outbreak and the release of vendor antivirus signatures. Email that is managed by Cisco and end users who are protected by Cisco Web Security Appliances will not be impacted by these attacks. Cisco security appliances are automatically updated to prevent both spam email and hostile web URLs from being passed to the end user.

Related Links
Cisco Security Intelligence Operations
Cisco SenderBase Security Network
 
Alert History
 

Version 41, May 6, 2014, 8:46 AM: Cisco Security Intelligence Operations has detected significant activity on May 5, 2014.

Version 40, April 29, 2014, 9:37 AM: Cisco Security Intelligence Operations has detected significant activity on April 28, 2014.

Version 39, April 24, 2014, 8:26 AM: Cisco Security Intelligence Operations has detected significant activity on April 23, 2014.

Version 38, April 23, 2014, 10:20 AM: Cisco Security Intelligence Operations has detected significant activity on April 22, 2014.

Version 37, April 22, 2014, 9:10 AM: Cisco Security Intelligence Operations has detected significant activity on April 21, 2014.

Version 36, April 14, 2014, 9:17 AM: Cisco Security Intelligence Operations has detected significant activity on April 11, 2014.

Version 35, April 7, 2014, 9:43 AM: Cisco Security Intelligence Operations has detected significant activity on April 4, 2014.

Version 34, April 2, 2014, 9:14 AM: Cisco Security Intelligence Operations has detected significant activity on April 1, 2014.

Version 33, March 11, 2014, 8:49 AM: Cisco Security Intelligence Operations has detected significant activity on March 10, 2014.

Version 32, March 10, 2014, 9:03 AM: Cisco Security Intelligence Operations has detected significant activity on March 9, 2014.

Version 31, February 13, 2014, 9:07 AM: Cisco Security Intelligence Operations has detected significant activity on February 12, 2014.

Version 30, January 30, 2014, 7:52 AM: Cisco Security Intelligence Operations has detected significant activity on January 29, 2014.

Version 29, December 18, 2013, 8:44 AM: Cisco Security Intelligence Operations has detected significant activity on December 17, 2013.

Version 28, December 6, 2013, 1:16 PM: Cisco Security Intelligence Operations has detected significant activity on December 4, 2013.

Version 27, December 5, 2013, 03:19 PM: Cisco Security Intelligence Operations has detected significant activity on December 4, 2013.

Version 26, December 4, 2013, 4:32 PM: Cisco Security Intelligence Operations has detected significant activity on December 3, 2013.

Version 25, December 3, 2013, 5:12 PM: Cisco Security Intelligence Operations has detected significant activity on December 2, 2013.

Version 24, December 2, 2013, 11:02 PM: Cisco Security Intelligence Operations has detected significant activity on November 28, 2013.

Version 23, November 27, 2013, 3:51 PM: Cisco Security Intelligence Operations has detected significant activity on November 26, 2013.

Version 22, November 18, 2013, 10:33 PM: Cisco Security Intelligence Operations has detected significant activity on November 18, 2013.

Version 21, November 18, 2013, 4:38 PM: Cisco Security Intelligence Operations has detected significant activity on November 15, 2013.

Version 20, November 15, 2013, 3:52 PM: Cisco Security Intelligence Operations has detected significant activity on November 14, 2013.

Version 19, November 14, 2013, 5:06 PM: Cisco Security Intelligence Operations has detected significant activity on November 12, 2013.

Version 18, November 12, 2013, 10:06 PM: Cisco Security Intelligence Operations has detected significant activity on November 11, 2013.

Version 17, November 11, 2013, 9:17 PM: Cisco Security Intelligence Operations has detected significant activity on November 8, 2013.

Version 16, November 5, 2013, 7:12 PM: Cisco Security Intelligence Operations has detected significant activity on November 4, 2013.

Version 15, October 30, 2013, 8:05 PM: Cisco Security Intelligence Operations has detected significant activity on October 29, 2013.

Version 14, October 29, 2013, 2:49 PM: Cisco Security Intelligence Operations has detected significant activity on October 28, 2013.

Version 13, October 16, 2013, 3:03 PM: Cisco Security Intelligence Operations has detected significant activity on October 16, 2013.

Version 12, October 2, 2013, 9:32 PM: Cisco Security Intelligence Operations has detected significant activity on October 2, 2013.

Version 11, September 28, 2013, 5:19 AM: Cisco Security Intelligence Operations has detected significant activity on September 27, 2013.

Version 10, September 25, 2013, 5:49 PM: Cisco Security Intelligence Operations has detected significant activity on September 25, 2013.

Version 9, September 25, 2013, 3:54 PM: Cisco Security Intelligence Operations has detected significant activity on September 24, 2013.

Version 8, September 24, 2013, 2:50 PM: Cisco Security Intelligence Operations has detected significant activity on September 23, 2013.

Version 7, September 23, 2013, 12:48 PM: Cisco Security Intelligence Operations has detected significant activity on September 20, 2013.

Version 6, September 18, 2013, 3:15 PM: Cisco Security Intelligence Operations has detected significant activity on September 18, 2013.

Version 5, September 18, 2013, 1:49 PM: Cisco Security Intelligence Operations has detected significant activity on September 17, 2013.

Version 4, September 17, 2013, 2:34 PM: Cisco Security Intelligence Operations has detected significant activity on September 17, 2013.

Version 3, September 13, 2013, 1:19 PM: Cisco Security Intelligence Operations has detected significant activity on September 12, 2013.

Version 2, September 10, 2013, 3:03 PM: Cisco Security Intelligence Operations has detected significant activity on September 10, 2013.

Version 1, September 6, 2013, 7:46 PM: Cisco Security Intelligence Operations has detected significant activity on September 6, 2013.


Product Sets
 
The security vulnerability applies to the following combinations of products.

Primary Products:
IntelliShieldThreat Outbreak Alert Original Release Base

Associated Products:
N/A




Alerts and bulletins on the Cisco Security Intelligence Operations Portal are highlighted by analysts in the Cisco Threat Operations Center and represent a subset of the comprehensive content that is available through Cisco Security IntelliShield Alert Manager Service. This customizable threat and vulnerability alert service provides security staff with access to timely, accurate, and credible information about threats and vulnerabilities that may affect their environment.


LEGAL DISCLAIMER
The urgency and severity ratings of this alert are not tailored to individual users; users may value alerts differently based upon their network configurations and circumstances. THE ALERT, AND INFORMATION CONTAINED THEREIN, ARE PROVIDED ON AN "AS IS" BASIS AND DO NOT IMPLY ANY KIND OF GUARANTEE OR WARRANTY, INCLUDING THE WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR USE. YOUR USE OF THE ALERT, AND INFORMATION CONTAINED THEREIN, OR MATERIALS LINKED FROM THE ALERT, IS AT YOUR OWN RISK. INFORMATION IN THIS ALERT AND ANY RELATED COMMUNICATIONS IS BASED ON OUR KNOWLEDGE AT THE TIME OF PUBLICATION AND IS SUBJECT TO CHANGE WITHOUT NOTICE. CISCO RESERVES THE RIGHT TO CHANGE OR UPDATE ALERTS AT ANY TIME.
Powered by  IntelliShield