Threat Outbreak Alert: Malicious Attachment E-mail Messages on May 15, 2013
Threat Type:
IntelliShield: Threat Outbreak Alert
IntelliShield ID:
24111
Version:
50
First Published:
2012 August 09 20:39 GMT
Last Published:
2013 May 15 14:03 GMT
Port:
Not Available
Urgency:
Possible Use
Credibility:
Confirmed
Severity:
Mild Damage
Version Summary:
Cisco Security Intelligence Operations has detected significant activity on May 15, 2013.
Description
Cisco Security Intelligence Operations has detected significant activity related to spam e-mail messages that claim to contain an attachment for the recipient. The text in the e-mail message attempts to convince the recipient to open the attachment and view the details. However, the .zip attachment contains a malicious .exe file that, when executed, attempts to infect the system with malicious code.
E-mail messages that are related to this threat (RuleID2970KVR, RuleID2970KVR_1, RuleID2970_1KVR, RuleID2970KVR_2, and RuleID2970KVR_3) may contain any of the following files:
The Photo_P0809201181992884.jpg_____.exe file in the photoq0857739080.zip has an approximate file size of 47,851 bytes.
The quote.pdf.exe file has a file size of 575,100 bytes. The MD5 checksum, which is a unique identifier of the executable, is the following string: 0x0BEF712F82C5BBAA4850832088263165
A variant of the quote.pdf.exe file in the quote.pdf.zip attachment has a file size of 14,848 bytes. The MD5 checksum is the following string: 0x36F3A59898075BDB2107C061EB31F48B
The case.report.pdf.exe file in the 54243162.pdf.zip attachment has a file size of 102,400 bytes. The MD5 checksum is the following string: 0x6CD6462C1B069D4C56D4B2DE2F2DF8DA
The complaint209832982.pdf.exe file in the Complaint209832982.zip attachment has a file size of 102,400 bytes. The MD5 checksum is the following string: 0x3451A73D24138895A905F5AD5FC412F6
The file389892.pdf.exe file in the Complaint.zip attachment has a file size of 102,400 bytes. The MD5 checksum is the following string: 0xF772A927EB0C44207DB8EBDFDE8A4582
The report.pdf.exe file in the Report.Id.30512437.zip attachment has a file size of 98,304 bytes. The MD5 checksum is the following string: 0x4D19CC20DC0FC6C66E3F295AA1F95DE6
The FAX_20121204_1929873988_27.pdf.exe file in the FAX_20121204_1929873988_27.zip attachment has a file size of 98,304 bytes. The MD5 checksum is the following string: 0x572D45E2EC0CC595DE6458922B5CCB09
The FAX_20121204_1354584611_27.pdf.exe file in the FAX_20121204_1354584611_27.zip attachment has a file size of 98,304 bytes. The MD5 checksum is the following string: 0xCB9250CB171CA666C03DFAEB6DC2A9B3
The Vodafone-MMS.jpeg.exe file size in the Vodafone-MMS-ID74892.zip attachment is unavailable. The MD5 checksum is also unavailable.
The Secure_Message.pdf.exe file in the Secure_Message.zip attachment has a file size of 135,168 bytes. The MD5 checksum is the following string: 0x08AFCC89109E2897B195D5FA94ED3282
The Encrypted_Message.pdf.exe file in the Encrypted_Message.zip attachment has a file size of 135,168 bytes. The MD5 checksum is the following string: 0x2EBA3CD9FA726812BD0F21DADD0F52DB
The BBB_SBQ_Form_UID.pdf.exe file in the rapidfax-08B72DF79DF7.zip attachment has a file size of 135,168 bytes. The MD5 checksum is the following string: 0x941FA4FDEFD1599FC5100BF113A0A2DA
The JetstarFlightItinerary.pdf.exe file in the REF 443367_JetstarFlightItinerary.pdf.zip attachment has a file size of 52,224 bytes. The MD5 checksum is the following string: 0x5B81EE9781192951DE0C30DF7593BE73
The BBB_Case.PDF.exe file in the Case #BXX7U55DUY.zip attachment has a file size of 102,400 bytes. The MD5 checksum is the following string: 0xE741B17E0E7A27B81EAFA912A1FA2E55
A variant of the report.pdf.exe file in the BBB.COMPLAINT28162504.zip attachment has a file size of 102,400 bytes. The MD5 checksum is the following string: 0x3249250DB9DF75D1243939E6AFF6237D
The Browser Settings for Internet Explorer 9.pdf..exe file in the Browser Settings for Internet Explorer 9.pdf.zip attachment has a file size of 72,704 bytes. The MD5 checksum, is the following string: 0xA72D7603A6B335F47CF65DEAFA99D405
The PDF-Ticketek-Purchase.pdf.exe file in the Ticketek-Purchase-3221222430.zip attachment has a file size of 72,704 bytes. The MD5 checksum is the following string: 0x3C84FE0C00B149E8D2CA787DA7B79370
The 97682473.PDF.R341.pdf.exe file in the P-51480557.2340.pdf.zip attachment has an approximate file size of 24,709 bytes. The MD5 checksum is the following string: 0x503AE5B7BECF302F224B1A96AF592256
The AmericanExpress-Online-Services-Notification.pdf.exe file in the AmericanExpress-Online-Services-Notification.zip attachment has a file size of 45,056 bytes. The MD5 checksum is the following string: 0x3436389F71E1CF2F230E5F361876C71C
The your booking Qantas.pdf.exe file in the your booking Qantas.zip attachment has a file size of 80,384 bytes. The MD5 checksum is the following string: 0x86DC6D01DC3F523B470D59E265AA9DCF
The Turkcell Fatura Bildirimi.pdf.exe file in the Turkcell Fatura Bildirimi.zip attachment has a file size of 80,384 bytes. The MD5 checksum is the following string: 0x3838AC0CFBF9E7A82BE16FADB471EE99
The DFFJ435DJ.JPG.exe file in the ZLHAKJJE.zip attachment has a file size of 49,664 bytes. The MD5 checksum is the following string: 0x0C815B747C05C961EBBE9AD7B0A5A46A
The DH47SKK3.jpg.exe file in the JESUEXNFJPG.zip attachment has an approximate file size of 38,696 bytes. The MD5 checksum is the following string: 0x05667cd8ca0f7e08fecf276d8bf72217
The Bilet_Alym_Onayy.pdf.exe file in the Bilet_Alym_Onayy.pdf.zip attachment has an approximate file size of 38,533 bytes. The MD5 checksum is not available.
The picture_FPO83G.jpeg.exe file in the picture_{SYBOL}.zip attachment has a file size of 51,712 bytes. The MD5 checksum is the following string: 0x29085E824976A0128FB7DCD96564068E
The IBF9570364.PDF.exe file size in the IBF0565389.pdf.zip attachment is unavailable. The MD5 checksum is also unavailable.
The EFATURA_8700934219.pdf.exe file in the EFATURA_6604923009.zip attachment has an approximate file size of 40,960 bytes. The MD5 checksum is the following string: 0xE8A14C835492D8FA3CC561bFCDF905F7
The 01-Fatura Bildirimi.PDF.exe file in the Fatura Bildirimi-01f.zip attachment has an approximate file size of 35,850 bytes. The MD5 checksum is not available.
The Bilet Alym Onayy.pdf.exe file size in the Bilet Alym_Onayy.zip attachment is unavailable. The MD5 checksum is also unavailable.
The PO040213RETECTLLORDER.pdf.exe file in the PO040213RETECTLLORDER.pdf.zip attachment has a file size of 151,040 bytes. The MD5 checksum is the following string: 0x6C00BCB6C779301F44140F77C7822E50
The SunExpress-Bilet-Bilginiz.pdf.exe file in the SunExpress-Bilet-Bilginiz.zip attachment has an approximate file size of 34,938 bytes. The MD5 checksum is not available.
The MMS VodafoneID70091.jpg.exe file in the MMS VodafoneID66349.zip attachment has a file size of 54,784 bytes. The MD5 checksum is the following string: 0x719F416465C1D8D641B715E7C0C390E6
The Digiturk-Fatura-6400422810.pdf.exe file in the Digiturk-Fatura-2102347130.zip attachment has a file size of 54,784 bytes. The MD5 checksum is the following string: 0x00789609A8868E262FE2D2272CCFA0F8
The foto 849832.jpg.exe file in the foto {SYBOL}.zip attachment has a file size of 59,239 bytes. The MD5 checksum is the following string: 0x67AB38D72A4BFCEE0DE34F067B28814E
The picture 978063.jpg.exe file size in the picture {SYBOL}.zip attachment is unavailable. The MD5 checksum is the following string: 0x67104CEC9B8B2A579704BA9DB03E8258
The Scan_02-13-2013.pdf.exe file in the Scan_02-13-2013-7918386.zip attachment has a file size of 154,624 bytes. The MD5 checksum is the following string: 0x69F31B037AFE78C5CC14D3877D01F528
The report_13022012.pdf.exe has a file size of 49,511 bytes. The MD5 checksum is the following string: 0x2F1A4A12D0CED524326D30F08A069AA4
The Myfax_MCFID_3784982639476284.pdf.exe file in the Myfax_MCFID_3784982639476284.pdf.exe.zip attachment has a file size of 38,912 bytes. The MD5 checksum is the following string: 0x9250CB3E8645D9106FD369C7F56B7CCD
A variant of Scan_02-13-2013.pdf.exe file in the Scan_02-13-2013-1677880.zip attachment has a file size of 154,624 bytes. The MD5 checksum is the following string: 0xB1096A1A961FAE04DE84D4EE628D447A
The Turkcell_65800954386-000678543.pdf.exe file in the Aaaaaaaa_0000000000-000000000.zip attachment has a file size of 57,703 bytes. The MD5 checksum is the following string: 0xE126A7EA3FABA587B03E88E52372F965
The QANTAS7769043.pdf.exe file in the QANTAS0470881.zip attachment has a file size of 56,167 bytes. The MD5 checksum is the following string: 0x8D5360A01C72ACEC803736B2FF5F25AF
The FuelCard-ebill7640027.PDF.exe file in the FuelCard-ebill6542151.PDF.zip attachment has a file size of 31,236 bytes. The MD5 checksum is the following string: 0x86FC891B3A41D4BC8FD599A572E2460B
The FuelCard-ebill7599300.PDF.exe file in the FuelCard-ebill5297077.PDF.zip attachment has a file size of 27,140 bytes. The MD5 checksum is the following string: 0xC2E02E48E8205B8448680EBF28DCD4FB
The fedach_rprt_030413.PDF.exe file has a file size of 157,696 bytes. The MD5 checksum is the following string: 0x37E587B7ABC643E3E8604CBBC7F8F70D
The adp_invoice_userID.pdf.exe file in the ADP_Invoice-66D8D15FFA.zip attachment has a file size of 115,712 bytes. The MD5 checksum is the following string: 0xBFE7C4846823174CBCBB10DE9DAF426B
The 0784_415.pdf.exe file in the 0784_415.pdf.zip attachment has a file size of 134,144 bytes. The MD5 checksum is the following string: 0xA8A0B31D4CC3AC0887732220085EFDB2
The ReservationFJRU7FJ3883.pdf.exe file in the ReservationSYMBOL[7]}661.zip attachment has a file size of 30,724 bytes. The MD5 checksum is the following string: 0x2C1A7509B389858310FFBC72EE64D501
The AtlanticHotel Booking Confirmation.doc.exe file in the AtlanticHotel Booking Confirmation.zip attachment has a file size of 31,236 bytes. The MD5 checksum is the following string: 0x436B39675D6244A82C34DCE08C22B4C5
The Flugladen_de Buchungsbedingungen.pdf.exe file in the Flugladen_de Buchungsbedingungen.pdf.zip attachment has a file size of 30724 bytes. The MD5 checksum is the following string: 0xCF6F1FB2E43AA209D7941118B4B5AE68
The Travel Details - Itinerary.pdf.exe file in the Travel Details - Itinerary.zip attachment has a file size of 53,119 bytes. The MD5 checksum is the following string: 0x3BC79F4EB80D8E728609F41297683FDB
The ADP-Invoice-000FF.pdf.exe file in the ADP-Invoice-1B92F16FB6.zip attachment has a file size of 114,176 bytes. The MD5 checksum is the following string: 0x3778255CD02AE8A15CF9331B99A67A2B
The 86486784-f.jpeg.exe file in the 40333513_{abcbig}.zip attachment has a file size of 35,191 bytes. The MD5 checksum is the following string: 0x7186FF3A228BB1EB24D6BB052A410A4B
The BBB_ComplaintReport_N89372947.doc.exe file in the Complaint_Vj462943496.zip attachment has a file size of 119,808 bytes. The MD5 checksum is the following string: 0x872E1F9000B4E852723CB3263A65F1A5
The Order_N9923704028.doc.exe file in the Aaaaa_A0000000.zip attachment has a file size of 128,000 bytes. The MD5 checksum is the following string: 0x97C9C3B4D50171A07305F91C1885EF9F
The CTP Green Slip Quote.pdf.exe file in the CTP Green Slip Quote.zip attachment has no file size and MD5 checksum.
The TNT-NL-765593094-855874003-factuur.PDF.exe file in the TNT-NL-016891790-710354467-factuur.zip attachment has a file size of 77,824 bytes. The MD5 checksum is the following string: 0xDD11492D246E97D341470D6C9C4DE619
The Cover-More Travel Insurance.PDF.exe file in the Cover-More Travel Insurance.zip attachment has a file size of 237,568 bytes. The MD5 checksum is the following string: 0x5068EA2478FC85FEAC77A65E4AA69A70
The MMS - KKLIFJBG5.JPEG.exe file in the MMS - 5HUAMVQ9.zip attachment has a file size of 207,360 bytes. The MD5 checksum is the following string: 0x09FE7B078E2F2F201FA9F627BCFB88BA
The Document.exe file in the Bank Invoice Docs.pdf.zip attachment has a file size of 3,436,544 bytes. The MD5 checksum is the following string: 0x74EC6A4FFBB7491CC2307FBE756AA304
The MMS - SD4AW3O0.jpg.exe file in the MMS - 4LFT77VQ.zip attachment has a file size of 135,168 bytes. The MD5 checksum is the following string: 0x5A49A9C0CE40BB591879F38F9226B1E1
The FedEx Shipment Notification.pdf.exe file in the FedEx Shipment Notification.zip attachment has a file size of 89,088 bytes. The MD5 checksum is the following string: 0xD302958B81311723EF8BC5206B11CB5D
The nice surprise.jpg.exe file in the nice_surprise.jpg.zip attachment has a file size of 348,160 bytes. The MD5 checksum is the following string: 0x86E203B70EBB4FD64C3F538BCC196FEC
The MMS_Message 88740922.bmp.exe file in the MMS_Message 14632411.zip attachment has a file size of 71,680 bytes. The MD5 checksum is the following string: 0xD55F732CC41EAADCA1C58B4C3D07E431
The following text is a sample of the e-mail message that is associated with this threat outbreak:
Subject: How are you kitten? I miss your caress and gentle touch.
Message Body:
You are currently registered as: asianloveline. com
- Age: 26
- Neme: Josie
- Seeking: A Female. Group 18-99
- Status: ONLINE
- Service: asianloveline. com 6286 Girls Currently Online
- Fotos: 8 fotos in attached file.
- Title: "im looking for sex 1on1
People say I have a very pretty face and also a killer body... but my sweet cherry pie is really what is good! I get along best with people who are al... "
Or
Message Body:
Dear Sir/Madam
We are a Philippine trading company specializes in buying and supplies of various goods and materials for our numerous customers all over Asia and
North Africa.
Presently we have a bulk demand of this specific attached products and will want you to check if you have the capacity to supply and more importantly the quality and specifications as you can also view from the attachment.
Please view the list attached and confirm if your company can produce and what is the delivery time.
Your cooperation is highly anticipated.Thank as we wait for your reply.
Regards
JENNIFER LABECH
The Purchasing Manager/International TRADE DEPARTMENT
LABECH TRADING COMPANY LTD
Address: 3M Main Office
9th Floor, Three World Square Building
# 22 Upper McKinley Road
McKinley Hill, Fort Bonifacio
Phone/fax +63-4563765
Taguig City 1634
Philippines
Or
Subject: Fwd: PRICE LIST NEEDED
Message Body:
Please quote best price for items attached. If possible a catalogue. I will await your email.
Regards
Peter Black.
Purchasing Manger
Sears Holdings Corporation
3333 Beverly Road Hoffman Estates, IL 60179
Phone: +1 (847) 286-2500
Toll free: 1-800-3494358
Emai: xxxxxx@xxxxxx.comWebsite: www.sears.com
Or
Subject: BBB Complaint activity report
Message Body:
Better Business Bureau®
Start With Trust®
bbb
Sat, 01 Dec 2012 01:13:20 +1000
RE: Case #54243162
Hello Sirs,
The Better Business Bureau has got the above mentioned complaint from one of your clients on the subject of their dealings with you. The detailed information about the consumer's concern is contained in attached document. Please give attention to this question and notify us of your opinion as soon as possible. We encourage you to open the COMPLAINT REPORT to respond on this complaint.
ATTACHED REPORT: 54243162.pdf.zip
We are looking forward to your urgent attention to this matter.
Sincerely,
Wim Mclugaish
Dispute Counselor
Better Business Bureau
Council of Better Business Bureaus
3033 Wilson Blvd, Suite 600 Arlington, VA 22201
Phone: 1 (703) 276.0100 Fax: 1 (703) 525.8277
This message was sent to calvelodd@ieighty.net.
Or
Subject: Complaint Case #99189639
Message Body:
Internal Revenue Service
You have received a complaint in regards to your business services. The complaint was filled by Mr./Mrs. Borromeo FIGUERON on 11/29/2012/
Case Number: 885030804500
Instructions on how to resolve this complaint as well as a copy of the original complaint are attached to this email.
Disputes involving consumer products and/or services may be arbitrated. Unless they directly relate to the contract that is the basis of this dispute, the following claims will be considered for arbitration only if all parties agree in writing that the arbitrator may consider them: Claims based on product liability; Claims for personal injuries; Claims that have been resolved by a previous court action, arbitration, or written agreement between the parties.
The decision as to whether your dispute or any part of it can be arbitrated rests solely with the IRS.
The IRS offers a binding arbitration service for disputes involving marketplace transactions. Arbitration is a convenient, civilized way to settle disputes quickly and fairly, without the costs associated with other legal options.
2012 Council of IRS, Inc. All Rights Reserved.
2001 IRS.gov
Or
Subject: Complaint Case #95305466
Message Body:
Internal Revenue Service
You have received a complaint in regards to your business services. The complaint was filled by Mr./Mrs. Afrodisio LAURIAS on 11/29/2012/
Case Number: 928862424980
Instructions on how to resolve this complaint as well as a copy of the original complaint are attached to this email.
Disputes involving consumer products and/or services may be arbitrated. Unless they directly relate to the contract that is the basis of this dispute, the following claims will be considered for arbitration only if all parties agree in writing that the arbitrator may consider them: Claims based on product liability; Claims for personal injuries; Claims that have been resolved by a previous court action, arbitration, or written agreement between the parties.
The decision as to whether your dispute or any part of it can be arbitrated rests solely with the IRS.
The IRS offers a binding arbitration service for disputes involving marketplace transactions. Arbitration is a convenient, civilized way to settle disputes quickly and fairly, without the costs associated with other legal options.
2012 Council of IRS, Inc. All Rights Reserved.
2001 IRS.gov
Or
Subject: Your customer’s concern
Message Body:
Better Business Bureau®
Start With Trust®
bbb
Wed, 05 Dec 2012 01:29:27 +1200
RE: Case #30512437
Hello,
The Better Business Bureau has got the above mentioned complaint from one of your customers concerning their business relations with you. The detailed information about the consumer's concern is presented in attached file. Please give attention to this problem and inform us about your opinion as soon as possible. We kindly ask you to open the ATTACHED REPORT to find the details on this complaint.
ATTACHED REPORT: Report.Id.30512437.zip
We look forward to your urgent response.
Faithfully yours,
Wiebke Dechelette
Dispute Counselor
Better Business Bureau
Better Business Bureau
3033 Wilson Blvd, Suite 600 Arlington, VA 22201
Phone: 1 (703) 276.0100 Fax: 1 (703) 525.8277
This message was sent to mandd@netsight.net.
Or
Subject: Corporate eFax message from "443-665-3967" - 17 page(s)
Message Body:
eFax Corporate
You have received a 17 page(s) fax at 2012-12-04 02:21:23 CST.
* The reference number for this fax is latf1_did11-1712454872-3369585553-07.
Please visit www.efaxcorporate.com/corp/twa/page/customerSupport if you have any questions regarding this message or your service. You may also e-mail our corporate support department at corporatesupport@mail.efax.com.
Thank you for using the eFax Corporate service!
Powered by j2
j2 Global | eFax | eVoice | FuseMail | Campaigner | KeepItSafe | OneBox
2012 j2 Global, Inc. All rights reserved.
eFax Corporate is a registered trademark of j2 Global, Inc.
Or
Subject: Corporate eFax message from "846-578-7579" - 21 page(s)
Message Body:
eFax Corporate
You have received a 21 page(s) fax at 2012-12-04 01:51:35 CST.
* The reference number for this fax is latf1_did11-1660568147-9888714287-91.
Please visit www.efaxcorporate.com/corp/twa/page/customerSupport if you have any questions regarding this message or your service. You may also e-mail our corporate support department at corporatesupport@mail.efax.com.
Thank you for using the eFax Corporate service!
Powered by j2
j2 Global | eFax | eVoice | FuseMail | Campaigner | KeepItSafe | OneBox
2012 j2 Global, Inc. All rights reserved.
eFax Corporate is a registered trademark of j2 Global, Inc.
Or
Subject: Vodafone MMS message
Message Body:
You have received a picture message from mobile number +393469188487
To save this picture, please save attached file.
To send a reply containing pictures, audio or video, click here
Alternatively, you can send a text-only reply (limited to 500 characters)
Copyright 2012 Vodafone Group
Or
Subject: Confidential - Secure Message from AMEX
Message Body:
Secure Message
The security of your personal information is of the utmost importance to American Express, so we have sent the attached as a secure electronic file.
Note: The attached file contains encrypted data.
If you have any questions, please call us at 800-453-6334, option 0. Representatives are available to assist you Monday through Thursday between 8:00 a.m. and 8:00 p.m. ET and Friday between 8:00 a.m. and 6:00 p.m. ET.
The information contained in this message may be privileged, confidential and protected from disclosure. If the reader of this message is not the intended recipient, or an employee or agent responsible for delivering this message to the intended recipient, you are hereby notified that any dissemination, distribution or copying of this communication is strictly prohibited.
Thank you,
American Express
2012 American Express Company. All rights reserved.
, , , , , , , , , , , , ,
Or
Subject: Encrypted Message from AMEX
Message Body:
Secure Message
The security of your personal information is of the utmost importance to American Express, so we have sent the attached as a secure electronic file.
Note: The attached file contains encrypted data.
If you have any questions, please call us at 800-327-7841, option 1. Representatives are available to assist you Monday through Thursday between 8:00 a.m. and 8:00 p.m. ET and Friday between 8:00 a.m. and 6:00 p.m. ET.
The information contained in this message may be privileged, confidential and protected from disclosure. If the reader of this message is not the intended recipient, or an employee or agent responsible for delivering this message to the intended recipient, you are hereby notified that any dissemination, distribution or copying of this communication is strictly prohibited.
Thank you,
American Express
2012 American Express Company. All rights reserved.
Or
Subject: SBQ Form #267014371(Ref#593420738-4301)
Message Body:
Thank you for supporting your Better Business Bureau (BBB).
As a service to BBB Accredited Businesses, we try to ensure that the information we provide to potential customers is as accurate as possible. In order for us to provide the correct information to the public, we ask that you review the information that we have on file for your company.
We encourage you to print this SBQ Form, answer the questions and respond to us. (self-extracting archive, Adobe PDF)
Please look carefully at your telephone and fax numbers on this sheet, and let us know any and all numbers used for your business (including 800, 900, rollover, and remote call forwarding). Our automated system is driven by telephone/fax numbers, so having accurate information is critical for consumers to find information about your business easily.
Thank you again for your support, and we look forward to receiving this updated information.
Sincerely,
Accreditation Services
Or
Subject: FW: Case #BXX7U55DUY
Message Body:
Case #BXX7U55DUY
The Better Business Bureau has received the above-referenced complaint from one of your customers regarding their dealings with you. The details of the consumer's concern are included on the reverse. Please review this matter and advise us of your position.
As a neutral third party, the Better Business Bureau can help to resolve the matter. Often complaints are a result of misunderstandings a company wants to know about and correct.
In the interest of time and good customer relations, please provide the BBB with written verification of your position in this matter by December 12, 2012. Your prompt response will allow BBB to be of service to you and your customer in reaching a mutually agreeable resolution. Please inform us if you have contacted your customer directly and already resolved this matter.
The Better Business Bureau develops and maintains Reliability Reports on companies across the United States and Canada . This information is available to the public and is frequently used by potential customers. Your cooperation in responding to this complaint becomes a permanent part of your file with the Better Business Bureau. Failure to promptly give attention to this matter may be reflected in the report we give to consumers about your company.
We encourage you to print this complaint (attached file), answer the questions and respond to us.
We look forward to your prompt attention to this matter.
Sincerely,
BBB Serving Metropolitan New York, Long Island and the Mid-Hudson Region
Or
Subject: BBB Re: Case #28162504
Message Body:
RE: Case #28162504
Hello,
The Better Business Bureau has received the above mentioned complaint from
one of your clients on the subject of their business relations with you. The
detailed information about the consumer's concern is explained in attached
document. Please give attention to this problem and inform us about your
position as soon as possible. We kindly ask you to open the COMPLAINT REPORT
to respond on this complaint.
ATTACHED REPORT: BBB.COMPLAINT28162504.zip
We are looking forward to your urgent reply.
Faithfully yours,
Rutendo Gorner
Dispute Counselor
Better Business Bureau
Better Business Bureau
3033 Wilson Blvd, Suite 600 Arlington, VA 22201
Phone: 1 (703) 276.0100 Fax: 1 (703) 525.8277
This message was sent to bigrel@idsi.net.
Or
Subject: Internet Explorer 9 Browser Settings for ANZ Internet Banking
Message Body:
Thank you for your recent enquiry regarding accessing ANZ Internet Banking.
As per your request, please find attached instructions for configuring Internet Explorer 9 for use with Internet Banking.
By following the steps outlined in the attached document at your ownpace,
you should be able to gain access to your Internet Banking service.
Please note that the attached document is an Adobe Acrobat file (PDF).
If you are unable to view this document, you can download Adobe AcrobatReader free of charge.
Just copy and paste the following website addressinto your browser address bar.
hxxp://www.adobe.com/products/acrobat/readstep2.html
Or
Message Body:
Degerli Müsterimiz,
Firmaniz Yalçin Kardesler Hali Tek.San.Ve Tic.Ltd e ait 25.12.2012 tarihinde basilan fatura bilgileriniz ekte dikkatinize sunulmustur. Toplam fatura tutari 1.483,62 TL olup son ödeme tarihi 01.01.2013 dir.
Detaylar ekli dosya bulunmaktadir.
Ödemelerinizi anlasmali oldugumuz banka subelerinden yapabilir, yeni fatura ödemeleriniz için otomatik ödeme talimati verebilirsiniz.
Bir sonraki ay hesap kesim tarihiniz 01.01.2013 olup son ödeme tarihiniz 13.01.2013 dir.
Saygilarimizla
Turkcell Iletisim Hizmetleri A.S.
Bu mesaj bilgilendirme amaciyla gönderilmistir.
Faturalariniz ile ilgili soru ve görüsleriniz için, 444 0 532 Turkcell Müsteri Hizmetleri'ni arayabilirsiniz.
Or
Message Body:
Description: T-Mobile ICO
From telephone number +447827718041
Password CYN1D58O
If your can't show pictures click here to visit our on-line a web address - www.t-mobile.co.uk/pmcollect - where you can look at the picture message (enter your telephone number and the password).
It'll only be available online for 14 days, so make sure you save the picture to a computer if you want to keep it.
Or
Subject: Interfax(tm) 1-sayfa faks
Message Body:
Interfax Servisi.
Alinan faks 16/01/2013 08:40:59 tarihinde (yerel saat) +90 (224) 789-1566 numaraya tarafindan gonderilmistir ve 1 sayfadir.
–
Lütfen bu mesaja YANIT VERMEYINIZ, alicisina ulasmayacaktir ! –
Or
Subject: PO040213_ RETECTL _ORDER.
Message Body:
Dear Friend,
Following my Boss previous mails to you, I have been asked to send an official Order asap
Please kindly send us a Proforma Invoice sealed with your company stamp and signature
Please Find attached Purchased Order.
Kindly quote our reference number in all correspondences.
Please revert to us if you have any clarifications. Kindly consider this
Urgent
Good day to you
Thanks & Regards
Warwick Banks( Mr)
PURCHASING GROUP HEAD
Pan Europe Industrial Equipments LLC,
No 101, Ist Floor, Sheikh Salem Al Quasimi Building,
Al Quasimi Area, P.O. Box No 66209,
Sharjah - United Arab Emirates.
Or
Subject: Fwd: Vodafone MMS, Wed, 6 Feb 2013 10:45:00 +0200
Message Body:
Description: Description: Vodafone e-mail servis saglayicilarinin MMS protokollerine uyumlu olmasi önemlidir
Telefon Numarasi +905493985199
Vodafone MMS, Vodafone'un MMS (Multimedia Messaging Service), yani görüntülü mesaj servisidir. MMS uyumlu cep telefonunuzdan, Vodafone, Turkcell veya Avea hatli ve MMS uyumlu bir baska cep telefonuna görüntülü ve sesli mesaj göndermenizi, almanizi saglar.
Online Self Servis'e Giris
Copyright 2012 Vodafone Group
Or
Subject: MMS Nachricht
Message Body:
Description: T-Mobile
Telefonnummer +491705525624
Or
Subject: T-Mobile MMS message
Message Body:
Description: T-Mobile ICO
From telephone number +447920201344
Password 7MXR26A7
If your can't show pictures click here to visit our on-line a web address - www.t-mobile.co.uk/pmcollect - where you can look at the picture message (enter your telephone number and the password).
It'll only be available online for 14 days, so make sure you save the picture to a computer if you want to keep it.
Or
Subject: FedMail (R): FEDACH Notification - End of Day - 03/4/13
Message Body:
Please overview attached ACH Advice Summary from the Federal Reserve System
Good Morning!
I`m attaching our invoicing document that does requires your signature.
I`ve filled out all of the required information, I just need your signature.
Please only fill out the bottom portion regarding your signature. (see below screenshot) Your banking information is not required.
Once completed, you can fax that directly to our Business Operations Unit on their secure fax line. 610-514-9883. Upon receipt, I can process your order.
Norm Jones
Marketing Consultant
Description: Description: http://www.cs-dev.dreamhosters.com/email_marketing_support_files/cs_newsfrommarketing/images/Comcast_Spotlight_Signatures.png
Suite 300
1500 Sycamore Road
Montoursville, PA 17754
Cell: 570-651-2793
Office: 570-244-4473
Fax: 570-651-9113
Norman_Jones@cable.comcast.com
This e-mail contains an advertisement or solicitation.
If you would rather not receive future e-mails from
Comcast Spotlight, you may unsubscribe here.
Or
Subject: Your ADP Payroll invoice for last week
Message Body:
Your ADP Payroll invoice for last week is attached for your review.
If you have any questions regarding this invoice, please contact your ADP service team at the number provided on the invoice for assistance.
Thank you for choosing ADP Payroll.
Important: Please do not respond to this message. It comes from an unattended mailbox.
Or
Subject: Fwd: Better Business Bureau Complaint
Message Body:
Good afternoon,
Here with the Better Business Bureau would like to inform you that we have received a complaint (ID 504825797)
from a customer of yours in regard to their dealership with you.
Please open the COMPLAINT REPORT attached to this email (Acrobat Reader file)
to view the details on this issue and suggest us about your position as soon as possible.
We hope to hear from you shortly.
Regards,
Litzy Abraham
Dispute Counselor
Better Business Bureau
Geachte heer, mevrouw,
Er zijn nieuwe facturen en/of creditnota's van TNT Express Nederland beschikbaar. In de bijlage vindt U uw originele factuur.
U kunt kopieën van deze documenten en hun csv-bestanden bekijken en downloaden via onderstaande link.
http: //express.tnt.com/einvoicing
Met vriendelijke groet,
Billing Department, The Netherlands
Finance & Administration, TNT Express Benelux
Email: nl.e-invoicing@tntexpress.nl
Or
Subject: Your Virgin Blue Itinerary
Message Body:
Travel Detail= s - Itinerary Is Attached
Hi,
Thank you for choosing to travel with Virgin Blue.
Your reservation numb= er is A9XUHP.
Virgin Blue is a ticketless a= irline, therefore you don't need a ticket to travel with us. All you = need to do is present photo ID and the attached itinerary. It's that easy= !
Important Flight Info= rmation
You must arrive at th= e airport and check-in at least 30 minutes prior to your scheduled depart= ure time.
Failure to arrive by this time may cause you to miss yo= ur flight and forfeit the fare paid.
When travelling on a Blue Sav= er or GO! Fare you can choose to travel with carry-on baggage only, or take checked baggage for j= ust a little more. If you haven't already purchased your baggage allowanc= e pre-pay online before you fly for onl= y $8 for up to 23kgs to save (it costs $20 at the airport). Purchase onli= ne at Manage Bookings or visit www.virg= inblue.com.au/baggage for more information about our new bag= gage policy.
Itinerary Viewing
Your itinerary is in = PDF format and is attached to this email. You w= ill need Adobe Acrobat to view this itinerary - download a copy free from= the Adobe websit= e. You can also request a plain text version of the itinerary.
Travel Extras
= Local Weather Forecast =BB
Check your local and destination weather f= orecast before you go.
Europcar =BB
Exclusive car hire rates from Europcar for= all Virgin Blue Guests.
Hotels =BB
Wide range of accommodation options that s= uits your needs at home or worldwide.
Airport Parking =BB
Save money in Australia and NZ by pre-book= ing at exclusive Guest rates.
GoDo Tours and Activities =BB<= /a>
Over 1,700 Tours and Activities from GoDo = for when at home or away!
=
The Lounge
The Lounge is your airport oasis to do business, enjoy a premium re= freshment, or just sit back and relax. Save $5 by pre-purchasin= g your single entry visit now for $30 AUD (inc. GST) per person= . Single Entry is also available for purch= ase at The Lounge Reception on the day of travel for $35 per person (inc.= GST). For more information on = Annual Membership to The Lounge please visit The Lounge website.
The Lounge is located in the domestic terminals at Brisbane, Sydne= y, Melbourne, Adelaide and Canberra airports.
3D"The
=
Velocity
Velocity members earn Velocity points for every dollar spent on the= ir Virgin Blue fare!
Our award-winning loyalty program is free to join online.
3D"Join
=
=
3D"Travel 3D"The=
Remember to save time and $30= on every return return trip by booking online at www.virginblue.com.au.<= br />
For all enquiries, please vis= it our website or call our award-winning Guest Cont= act Centre on 13 6789. Guests calling from outside of Australia please ca= ll +61 7 3295 2296.
Travel on Virgin Blue is subj= ect to our Conditions of Carriage and dangerous goods restrictions, as ou= tlined in the attachments to this email.
3D"V=
Enjoy your flight!... from The Virgin B= lue Crew
----- Forwarded Message -----From: yourtravelinsurance-noreply@covermore.com.au To: magt@westnet.com.au Sent: Tuesday, 16 April, 2013 8:33:15 AM GMT +08:00 Beijing / Chongqing / Hong Kong / Urumqi Subject: Cover-More Travel Insurance Cover (policy number: 62178386)
Thank you for choosing to travel with Cover-More Travel Insurance.
You have chosen to purchase a policy with Australia's most popular travel insurance provider, trusted by over 1,000,000 Australian travellers each year.
Attached is a copy of your Certificate of Insurance along with a copy of the Product Disclosure Statement (PDS), which we encourage you to read.
Remember to keep your emergency assistance card with you when travelling and our 24 emergency assistance team are here to help you.
We hope you have a safe and enjoyable journey,
Cover-More Travel Insurance Team
P 1300 72 88 22 | E enquiries@covermore.com.au A Private Bag 913 North Sydney NSW 2059 www.covermore.com.au
Or
Subject: RE: Reconfirm bank Invoice
Message Body:
Dear Sir,
Concerning the invoice, Our bank has rejected our T/R this morning.
Please confirm if your Beneficiary in the bank attachment is correct
and kindly
revert to me!
Awaiting your urgent reply
THANKS & REGARDS
Satish. N
Ganesh Exime
4kms Bangalore Road
Challakere 577522
Chitradurga Dist.
Karnataka State, INDIA
Off: +91-8195 - 222489
Fax: +91-08195 - 222859
Mobile: +91-98453-8348
Or
Subject: FedEx Shipment Notification
Message Body:
________________________________________________________________________________
This tracking update has been requested and attached to this email
________________________________________________________________________________
Reference information includes: Invoice number, Reference, Special handling/Services, Residential Delivery. Reference information is attached to this email.
Tracking number: 446967508433
To track the latest status of your shipment, click on the tracking number above, or visit us at fedex.com.
To learn more about FedEx Express, please visit our website at fedex.com.
This tracking update has been sent to you by FedEx on the behalf of the Requestor noted above. FedEx does not validate the authenticity of the requestor and does not validate, guarantee or warrant the authenticity of the request, the requestor's message, or the accuracy of this tracking update. For tracking results and fedex.com's terms of use, go to fedex.com.
Thank you for your business.
Or
Subject: Give you a nice surprise!!!
Message Body:
Give you a nice surprise!!!
Cisco Security Intelligence Operations analysts examine real-world e-mail traffic data that is collected from over 100,000 contributing organizations worldwide. This data helps provide a range of information about and analysis of global e-mail security threats and trends. Cisco will continue to monitor this threat and automatically adapt systems to protect customers. This report will be updated if there are significant changes or if the risk to end users increas
Cisco security appliances protect customers during the critical period between the first exploit of a virus outbreak and the release of vendor antivirus signatures. E-mail that is managed by Cisco and end users who are protected by Cisco Web Security Appliances will not be impacted by these attacks. Cisco security appliances are automatically updated to prevent both spam e-mail and hostile web URLs from being passed to the end user.
The security vulnerability applies to the following combinations of products.
Primary Products:
IntelliShield
Threat Outbreak Alert
Original Release Base
Associated Products:
N/A
Alerts and bulletins on the Cisco Security Intelligence Operations Portal are highlighted by analysts in the
Cisco Threat Operations Center and represent a subset of the comprehensive content that is available through Cisco Security IntelliShield Alert Manager Service.
This customizable threat and vulnerability alert service provides security staff with access to timely, accurate, and credible information about threats and vulnerabilities that may affect their environment. Cisco is pleased to offer a free trial of the service.
To register for full access, please visit the IntelliShield trial registration page.
LEGAL DISCLAIMER The urgency and severity ratings of this alert are not tailored to individual users; users may value alerts differently based upon their network configurations and circumstances. THE ALERT, AND INFORMATION CONTAINED THEREIN, ARE PROVIDED ON AN "AS IS" BASIS AND DO NOT IMPLY ANY KIND OF GUARANTEE OR WARRANTY, INCLUDING THE WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR USE. YOUR USE OF THE ALERT, AND INFORMATION CONTAINED THEREIN, OR MATERIALS LINKED FROM THE ALERT, IS AT YOUR OWN RISK. INFORMATION IN THIS ALERT AND ANY RELATED COMMUNICATIONS IS BASED ON OUR KNOWLEDGE AT THE TIME OF PUBLICATION AND IS SUBJECT TO CHANGE WITHOUT NOTICE. CISCO RESERVES THE RIGHT TO CHANGE OR UPDATE ALERTS AT ANY TIME.
