Threat Outbreak Alert: Fake Xerox Scan Attachment Email Messages on June 18, 2013
Threat Type:
IntelliShield: Threat Outbreak Alert
IntelliShield ID:
25325
Version:
67
First Published:
2012 March 06 18:23 GMT
Last Published:
2013 June 19 13:25 GMT
Port:
Not Available
Urgency:
Possible Use
Credibility:
Confirmed
Severity:
Mild Damage
Version Summary:
Cisco Security Intelligence Operations has detected significant activity on June 18, 2013.
Description
Cisco Security Intelligence Operations has detected significant activity related to spam email messages that claim to contain a scanned document from a Xerox WorkCentre Pro device. The text in the email message attempts to convince the recipient to open the attachment and view the document. However, the attachment could contain a malicious .exe or .htm file that, when executed, attempts to infect the system with malicious code.
Email messages that are related to this threat (RuleID3990, RuleID3990KVR, RuleID4274, RuleID4274KVR, and RuleID4274_1KVR) may contain any of the following files:
Xerox_Doc-W202.htm Xerox_Scan_03.10_QZ37927.htm Xerox_Document_03.09_5Z1123.htm Xerox_Document-2513.zip Xerox_Scan_NB328345.exe Xerox_Scan-V80.zip Xerox_Scan_ID99923523.exe product sample.zip product sample.exe product(1).zip product.exe product samples.zip product samples.exe purchase order.zip tt.pdf.exe d12-.exe Order.zip Order.exe quote.rar.exe payment slip.zip payment slip_xls.exe PPURCHASE-ORDER-.zip PURCHASE-ORDER-.exe order listCatalogue.Jpeg.zip PURCHASE ORDER PDF PDF.exe ORDER.zip ready.exe ORDER-SAMPLE2-.zip ORDER-SAMPLE2-.exe New Order.zip New Order.exe xju3_wyb20-2012241019-7128487514-63_pdf.zip inbound.fax.PDF.viewer.exe FAX_20120711_0414157531_7.pdf.zip Purchase Order.exe bbb.complaint.report.id62502413.pdf.zip PAYMEN~1.EXE paymentslip.zip payment slip.exe Purhcase Order.zip Purchase Order #436.exe Profile.exe Sample.pdf.zip product sample.zip.zip paymentslip?fdp.exe telexrat.exe PURCHASE ORDER.zip TT Copy.exe Purchase #042.exe New_Quotation_Order.zip New_Quotation_Order.EXE paymentslip.exe Order Sample10-.zip Order Sample10-.exee SAMPLE_ORDER.zip SAMPLE_ORDER.DOCX.exe Confirm payment slip.zip New order.exe sample (1).zip sample.exe Payment Advice [B43285147134].zip Payment Advice [B43{_hsbs ref}].exe Sample.zip PAYMENT RECEIPT 24-04-2013-GBK-75.zip PAYMENT RECEIPT 24-04-2013-GBK-75.exe Purchase Order.zip New Ans.scr Payment receipt.exe Payment slip.scr Product Sample.zip Product Sample.exe PAYMENT RECEIPT 30-04-2013-GBK-75.zip Payment reeceipt.exe Payment_Invoice DOR-2013004001M-PI_RLB 9.4.2013.zip Payment_Invoice DOR-2013004001M-PI_RLB 9.4.2013.exe payment.zip payment.exe MT103 OF $45,000 USD.zip productsample.exe Quotation.zip Bank payment slip.exe Payment Advice [B45430295471].zip Payment Advice [B45{_hsbs ref}].exe PO Samples.zip Product Samples.scr PURCHASE ORDER 3025.zip New Godwin.scr Payment Advice [G52766575985].zip Payment Advice [G52{_net1}].exe Sample_and_Purchase_#_45890-00.zip Purchase Order.scr Bank Payment Slip.zip Payment Advice [G54058750905].zip Payment Advice [G54{_net1}].exe Payment_Advice.zip Payment Advice [G52094179903].zip Payment_Advice.exe Payment.zip Payment.scr paymentSlip.scr Payment Copy For New Invoice.zip Payment Copy For New Invoice.scr Purchase Order No. 693.zip Purchase Order No. 693.exe Payment Advice [G55526943723].zip Payment Advice.exe Catalogue.zip Order.scr 12 Containers Order.zip
Bank payment slip.exe products.zip
Product.scr
Product.zip
The Xerox_Doc-W202.htm has a file size of approximately 2,328 bytes. The MD5 checksum is not available.
The Xerox_Scan_03.10_QZ37927.htm has a file size of approximately 3,153 bytes. The MD5 checksum is not available.
The Xerox_Document_03.09_5Z1123.htm has a file size of approximately 3,112 bytes. The MD5 checksum is not available.
The Xerox_Scan_NB328345.exe file in the Xerox_Document-2513.zip attachment has a file size of 99,840 bytes. The MD5 checksum, which is a unique identifier of the executable, is the following string: 0xAB1A8D2D4DB3DA2EE7C0D3F38BCFFFED
The Xerox_Scan_ID99923523.exe file in the Xerox_Scan-V80.zip attachment has a file size of 97,792 bytes. The MD5 checksum is the following string: 0x1AE5F11C5520CFE6DC66F5116A8DF80E
The product sample.exe file in the product sample.zip attachment has a file size of 201,216 bytes. The MD5 checksum is the following string: 0x419C3D9B79E4E207EA6E35894433D9C4
The product.exe file in the product(1).zip attachment has a file size of 277,134 bytes. The MD5 checksum is the following string: 0xCB3926522AF78234A4BEBADCDF3E9238
The product samples.exe file in the product samples.zip attachment has a file size of 159,446 bytes. The MD5 checksum is the following string: 0xB1B9D817FD1A3C8E4EFD52016A5E7A3
A variant of the product sample.exe file in the product sample.zip attachment has a file size of 209,408 bytes. The MD5 checksum is the following string: 0x30A2E8BCD50A645AEB4E05A71B1DEA72
The d12-.exe file in the purchase order.zip attachment has a file size of 205,312 bytes. The MD5 checksum is the following string: 0xF761A04DA6B5E11FE3CD59B901C10185
The quote.rar.exe file in the Order.zip attachment has a file size of 575,113 bytes. The MD5 checksum is the following string: 0x97A3DF83E0EA9122462EC22B1B012857
The payment slip_xls.exe file in the payment slip.zip attachment has a file size of 1,012,165 bytes. The MD5 checksum is the following string: 0x4D0324BC132EE1B5ED757543152AD632
The PURCHASE-ORDER-.exe file in the PPURCHASE-ORDER-.zip attachment has a file size of 266,752 bytes. The MD5 checksum is the following string: 0xE52F1216908B55F6329E03254970B96F
The PURCHASE ORDER PDF PDF.exe file in the order listCatalogue.Jpeg.zip attachment has a file size of 702,752 bytes. The MD5 checksum is the following string: 0x0C44E34D4EB0CBDB195BCA7DC8494014
The ready.exe file in the ORDER.zip attachment has a file size of 454,718 bytes. The MD5 checksum is the following string: 0x017FBF1A2D0CD9F3A31FC72095AC0373
The ORDER-SAMPLE2-.exe file in the ORDER-SAMPLE2-.zip attachment has a file size of 258,560 bytes. The MD5 checksum is the following string: 0x7DDB480F1D80FE536A52DCD444584B50
A variant of the PURCHASE ORDER PDF PDF.exe file in the PURCHASE ORDER.zip attachment has a file size of 728,864 bytes. The MD5 checksum is the following string: 0x351E904C8AC9D0293FB0FBFC918638AF
The New Order.exe file size and MD5 checksum are not available.
The inbound.fax.PDF.viewer.exe file in the xju3_wyb20-2012241019-7128487514-63_pdf.zip attachment has a file size of 126,823 bytes. The MD5 checksum is the following string: 0xF514109B244596A3E37779E3112D8138
The Purchase Order.exe file has a file size of 575,088 bytes. The MD5 checksum is the following string: 0x3E5D3D7304D36662311301B5F3EE5D7A
A variant of the inbound.fax.PDF.viewer.exe file in the bbb.complaint.report.id62502413.pdf.zip attachment has a file size of 120,320 bytes. The MD5 checksum is the following string: 0xA2288305295D8245FA2FD93B20E9F116
A third variant of the inbound.fax.PDF.viewer.exe file in the FAX_20120711_0414157531_7.pdf.zip attachment has a file size of 137,072 bytes. The MD5 checksum is the following string: 0x7FEDD29DC94B3FE6ABC6BC5EF5D6934F
The tt.pdf.exe file in the Purchase Order.zip attachment has a file size of 575,047 bytes. The MD5 checksum is the following string: 0x6F2A1B2D767E5F7BADB8C2F95074361F
The PAYMEN~1.EXE file in the paymentslip.zip attachment has a file size of 605,696 bytes. The MD5 checksum is the following string: 0xD105CE7D6DBA0763A8EBF01AE52429F1
The payment slip.exe file in the payment slip.zip attachment has a file size of 1,314,566 bytes. The MD5 checksum is the following string: 0x1E8956C1A50369FBFB2273C4603820ED
The Purchase Order #436.exe file in the Purhcase Order.zip attachment has a file size of 108,227 bytes. The MD5 checksum is the following string: 0x38102E24C5C8738B9EE41CDEB756A017
The Profile.exe file in the Purhcase Order.zip attachment has a file size of 343,552 bytes. The MD5 checksum is the following string: 0xB36B1A88E5DE7A81FA1A97430094086A
The Sample.exe file in the Sample.pdf.zip attachment has a file size of 238,020 bytes. The MD5 checksum is the following string: 0xF8CB6E81C21DEE8326FBE9A709186F91
The product.exe file in the product sample.zip.zip attachment has a file size of 178,506 bytes. The MD5 checksum is the following string: 0x3271E0BEA672ECAEB7FEBB4643049270
The paymentslip?fdp.exe file in the paymentslip.zip attachment has a file size of 520,704 bytes. The MD5 checksum is the following string: 0x63F23BF40CF1801BD91963A740AE4571
The Order.exe file in the Order.zip attachment has a file size of 242,176 bytes. The MD5 checksum is the following string: 0xDF19248558103C8B998D1B13512289EC
The telexrat.exe file in the payment slip.zip attachment has a file size of 1,000,460 bytes. The MD5 checksum is the following string: 0xBFD24F223EA8AF2210DC980DDF8D2A3E
The TT Copy.exe file in the PURCHASE ORDER.zip attachment has a file size of 186,368 bytes. The MD5 checksum is the following string: 0x520C6484874BC7DFD6C989A51CD8BF84
The Purchase #042.exe file in the Purchase Order.zip attachment has a file size of 435,200 bytes. The MD5 checksum is the following string: 0x8466BE93AEF72616A070D719D075FE75
The New_Quotation_Order.EXE file in the New_Quotation_Order.zip attachment has a file size of 195,072 bytes. The MD5 checksum is the following string: 0x9DAA47EF691B5D8DBABF85351A1C30A6
The paymentslip.exe file in the paymentslip.zip attachment has a file size of 602,112 bytes. The MD5 checksum is the following string: 0x6BB0B0306D2A4E80CA60137738262AC1
The Order Sample10-.exee file in the Order Sample10-.zip attachment has a file size of 229,888 bytes. The MD5 checksum is the following string: 0xDE0E60DF038CAC76FAC809EB9B18B8F0
The SAMPLE_ORDER.DOCX.exe file in the SAMPLE_ORDER.zip attachment has a file size of 3,656,942 bytes. The MD5 checksum is the following string: 0xEAFF80DAE84C074F5F9EF47BDA174075
The New order.exe file in the Confirm payment slip.zip attachment has a file size of 250,368 bytes. The MD5 checksum is the following string: 0xA1B0F984EE84CF7BB7B09C3C56AAB3D2
A variant of the Purchase Order.exe file in the Purchase Order.zip attachment has a file size of 694,681 bytes. The MD5 checksum is the following string: 0xFF89B337CA41C41ACBDA78C652755E58
A variant of sample.exe file in the sample (1).zip attachment has a file size of 1,342,229 bytes. The MD5 checksum is the following string: 0x7D09539E3A4FEF74FCD503147BD92C1D
The Payment Advice [B43{_hsbs ref}].exe file in the Payment Advice [B43285147134].zip attachment has a file size of 90,624 bytes. The MD5 checksum is the following string: 0x72D62C853625562765A8701962BF5ADD
A third variant of the Sample.exe file in the Sample.zip attachment has a file size of 804,352 bytes. The MD5 checksum is the following string: 0x4052807C5403C0C9D1561657E53DFCB2
The PAYMENT RECEIPT 24-04-2013-GBK-75.exe file in the PAYMENT RECEIPT 24-04-2013-GBK-75.zip attachment has a file size of 233,472 bytes. The MD5 checksum is the following string: 0xC671D0896A2412B42E1ABAD4BE9D43A8
The New Ans.scr file in the Purchase Order.zip attachment has a file size of 471,552 bytes. The MD5 checksum is the following string: 0x40E35E29B292431ABE9F97B1206B1B48
The Payment receipt.exe file in the PAYMENT RECEIPT 24-04-2013-GBK-75.zip attachment has a file size of 389,632 bytes. The MD5 checksum is the following string: 0xB3D79F187E8896D60623C97BA9C67DD1
The Payment slip.scr file in the Payment slip.zip attachment has a file size of 480,534 bytes. The MD5 checksum is the following string: 0xF84AE52A6B502A2CDE76C4AA5C1C6CBA
The Product Sample.exe file in the Product Sample.zip attachment has a file size of 963,771 bytes. The MD5 checksum is the following string: 0x0CF5208DE7FD7AD4EC8C882DFFAC4888
The Payment reeceipt.exe file in the PAYMENT RECEIPT 30-04-2013-GBK-75.zip attachment has a file size of 371,712 bytes. The MD5 checksum is the following string: 0x0A3723483E06DCF7E51073972B9D1EF3
The Payment_Invoice DOR-2013004001M-PI_RLB 9.4.2013.exe file in the Payment_Invoice DOR-2013004001M-PI_RLB 9.4.2013.zip attachment has a file size of 173,056 bytes. The MD5 checksum is the following string: 0xE76EAD4B30D9C55F40D974ADC7002454
The payment.exe file in the payment.zip attachment has a file size of 528,896 bytes. The MD5 checksum is the following string: 0x05E62E5E63E14D542D689F71347C0620
The productsample.exe file in the MT103 OF $45,000 USD.zip attachment has a file size of 528,896 bytes. The MD5 checksum is the following string: 0x7F005F833F3ACCE59AA75633F35975C6
The third variant of the Purchase Order.exe file in the Purchase Order.zip attachment has a file size of 219,975 bytes. The MD5 checksum is the following string: 0xAECB4ED67F97578573AD12BF7A2F91B7
The Bank payment slip.exe file in the Quotation.zip attachment has a file size of 295,936 bytes. The MD5 checksum is the following string: 0xC6648BB54FAAAB33D65A08DF7DA07A90
A variant of the payment.exe file in the payment.zip attachment has a file size of 568,832 bytes. The MD5 checksum is the following string: 0x660D04A3B3A4ACE7E6DB53BFF59DE786
The Payment Advice [B45{_hsbs ref}].exe file in the Payment Advice [B45430295471].zip attachment has a file size of 133,120 bytes. The MD5 checksum is the following string: 0xB843373B71851B1AD97EA43AA70194EF
The Product Samples.scr file in the PO Samples.zip attachment has a file size of 471,552 bytes. The MD5 checksum is the following string: 0xFCDFD2726C149C17304CBE58F5B77096
The New Godwin.scr file in the PURCHASE ORDER 3025.zip attachment has a file size of 524,800 bytes. The MD5 checksum is the following string: 0x747DEF5627BC741FD82D849451AF69F0
A third variant of the Purchase Order.exe file in the Purchase Order.zip attachment has a file size of 221,105 bytes. The MD5 checksum is the following string: 0xAA449DF6FFD7CD145610D43B590D8DD6
The Payment Advice [G52{_net1}].exe file in the Payment Advice [G52766575985].zip attachment has a file size of 125,952 bytes. The MD5 checksum is the following string: 0x7FF037403087D7DB3CD79F1E73FE5D06
The Purchase Order.scr file in the Sample_and_Purchase_#_45890-00.zip attachment has a file size of 1,370,494 bytes. The MD5 checksum is the following string: 0x02B523F44D71019AD3071665168E04AE
A variant of the Bank Payment Slip.exe file in the Bank Payment Slip.zip attachment has a file size of 229,888 bytes. The MD5 checksum is the following string: 0x268187BCFE4FB9BA2A56D835C1D40A9E
The Payment Advice [G54{_net1}].exe file in the Payment Advice [G54058750905].zip attachment has a file size of 125,952 bytes. The MD5 checksum is the following string: 0x0ABC65C2BE51B33D479C05B10FC10586
The Payment_Advice.exe file in the Payment_Advice.zip attachment has a file size of 127,488 bytes. The MD5 checksum is the following string: 0xE45A4100C0EC53221137F8B546B30198
The Payment.scr file in the Payment.zip attachment has a file size of 387,667 bytes. The MD5 checksum is the following string: 0x951D09E5C41A2E4E8F3EA536EF18C42F
The paymentSlip.scr file in the paymentSlip.zip attachment has a file size of 407,040 bytes. The MD5 checksum is the following string: 0x628F8A2AE36B932253D6AE8888E8FF3F
The Payment Copy For New Invoice.scr file in the Payment Copy For New Invoice.zip attachment has a file size of 549,376 bytes. The MD5 checksum is the following string: 0x42753CD29DB2EDC6EC9BB93BEAB1A17E
The variant of the Payment_Advice.exe file in the Payment Advice [G52094179903].zip attachment has a file size of 84,992 bytes. The MD5 checksum is the following string: 0x6295F7F1FC132C63BCC511146DE12EF5
The Purchase Order No. 693.exe file in the Purchase Order No. 693.zip attachment has a file size of 896,300 bytes. The MD5 checksum is the following string: 0xFDA3DB37A819F2435D4263266D1C4074
The Payment Advice.exe file in the Payment Advice [G55526943723].zip attachment has a file size of 78,848 bytes. The MD5 checksum is the following string: 0x6CF4695A367FC0FE976A49A71B1F76F6
The Order.scr file in the Catalogue.zip attachment has a file size of 320,000 bytes. The MD5 checksum is the following string: 0xFCD1667AE77241403D903D1F4B25BE3E
The Bank payment slip.exe file in the 12 Containers Order.zip attachment has a file size of 324,096 bytes. The MD5 checksum is the following string: 0xC9088184746B8AD44DBCC1B2906E9F80
The Product.scr file in the products.zip attachment has a file size of 537,088 bytes. The MD5 checksum is the following string: 0x76C9BBE21F5EFC839B8634826B34F4D1
A variant of the Product.exe file in the Product.zip attachment has a file size of 364,544 bytes. The MD5 checksum is the following string: 0x131E7271C429D7AB158AB061236CE82B
A variant of the Order.exe has a file size of 238,080 bytes. The MD5 checksum is the following string: 0x263F5945D16E542DEACCF7A014A7F03A
A variant of the PAYMENT SLIP.scr has a file size of 368,545 bytes. The MD5 checksum is the following string: 0x2068E511C1CB479FF96D5357B59B21C4
The following text is a sample of the email message that is associated with this threat outbreak:
Subject: Scan from a Xerox W. Pro #289906
Message Body:
Please open the attached document. It was scanned and sent
to you using a Xerox WorkCentre Pro.
Sent by: Frederic
Number of Images: 9
Attachment File Type: .HTML [Internet Explorer Format]
Xerox WorkCentre Location: machine location not set
Device Name: XEROX88OD28ID87401
Or
Message Body:
Dear Sir/Madam,
We got your contact from one of your customers in the USA .
We have interest in purchasing your products and we sincerely hope to establish a long-term business relation with your esteemed company.
Please kindly check the attachment and find our COMPANY CATALOGUE,SAMPLE CATALOGUE/DESIGN and please do inform me if you make exactly the same with the right quality material.
Please kindly email me your latest catalog as attachment. Also, inform me about the MOQ, Delivery time, and payment terms.
Your early reply is highly appreciated. Thank You!
Best Regards,
*****************************************************
Mrs Fiora Libard
(Purchasing Manager)
Or
Subject: Fwd: Urgent Inquiry About Your Product
Message Body:
I sent you an email previously based on our trial order but no response. Here is the exact sample of the product we wish to purchase from your company, so please confirm to us if you/your company can make provision of the exact product in attachment, which you can also view by downloading the attachment in this email and view the samples we need:
Upon the receipt of your confirmation, I shall forward to you the order quantity and delivery details,which will enable you to give us a proper quotation.Please download attachment to view our product sample.
Thank you.
Dyakonov, Maria
Temash Group Russia
Purchase coordinator
address: 620102,
Yekaterinburg, 9 Zoological street.
20017, Ekaterinburg, Kosmonavtov, 11-b, Lyter D, 2
nd Floor Actual
Yekaterinburg
RUSSIA
Tel: + 7 (343) 214-08-691
Fax: + 7 (343) 228-09-198
--
Amanda Cropper
Gecko Creative
151 S. Robinson St.
Baltimore, MD 21224
410.342.8140 phone
410.342.8143 fax
www.geckocreative.com
Minority Business Enterprise (MBE 06-122)
Small Business Reserve (SBR SB11-3669)
Minority/Women's Business Enterprise (WBE 08-005202)
Or
Subject: purchase order
Message Body:
Hello
Am Mr. Berki, sales manager of TECHINATURAL LLC,
currently we are looking for supplier of your products.
We are interesting in your products in large quantity:
Kindly find attached a Purchase Order for what we need and quantity. Please check and quote similar items.
Please kindly quote your best prices so we can place an order. Thanks for your Kind Cooperation.
S.BerkI
Or
Subject: RE: requirement for this order
Message Body:
DHello Sir/Madam,
it is my pleasure to contact you in respect to my order i want to purchase from you so we can make a huge purchase Asap,,
SIMCO Engineering, Ltd.,here in thailand has been in business of importing and exporting
Meanwhile,Before placing an order,i wanted to know if your company can supply me with my requirements.
I would like to know a little more about your company and your terms like,
1. Quality of goods and service after sale
2. Export and import licence terms
3. FOB price and FoB port
4. Delivery and shipment
5. payment terms.
For convinnence i have sent the attached Trails order list and sample pictures so you can reply me with facts and details
I await your response.
Regards,
Sales Manager
Engr Tamret Dale Gelly
email: ivjoegelly@126.com
Altn: tamret.dale101@gmail.com
SIMCO ENGINEERING LIMITED PARTNERSHIP GROUP LLC
Our address :
50/101 M.13 PUTTAMONTHON SAI5 RD / RAIKHING /SAMPRAN NAKORNPRATHOM /THAILAND/ 73210 TEL : +66-28119371 TO4 FAX : +66-8119375 E-MAIL : ivyjoegelly@126.com
Or
Subject: PURCHASE ORDER
Message Body:
Dear Sir/Madam,
We are a multinational Marketing & Distribution company with global operations, based in the USA. As such we source product from China and other asian producing countries in order to distribute and sell these products through distribution and retailing. We currently distribute products very successfully in the states and all over the cities here in USA, and work on very large volumes of product.
We have interest in purchasing your products and we sincerely hope to establish a long-term business relation with your esteemed company.Please kindly check the attachment and find our PURCHASE ORDER,SAMPLE CATALOGUE/DESIGN and please do inform me if you make exactly the same with the right quality material.
Please kindly email me your latest catalog as attachment. Also, inform me about the MOQ, Delivery time, and payment terms.
Your early reply is highly appreciated. Thank You!
Best Regards,
*****************************************************
Purchase Manager.
Mrs Elizabeth Brown
Or
Message Body:
Dear Sir/madam
Currently we are looking for supplier of your products.
We are interesting in your products in large quantity:
Kindly find attached a Purchase Order for what we need and quantity.
Please check and quote similar items.
Please kindly quote your best prices so we can place an order.
Thanks for your Kind Cooperation.
Asamul
Purchasing manager
SAHIN MAKINA LLC
Or
Subject: Corporate eFax: You got a 2 page(s) fax
Message Body:
Corporate eFax
bar
Fax Message [Caller-ID: 201-616-2038]
You got a 2 page(s) fax at Wed, 24 Oct 2012 19:45:48 +0700.
* The reference number for this fax is xju3_wyb20-2012241019-7128487514-63.
Open this fax using your PDF reader.
Please visit www.eFax.com/en/efax/twa/page/help if you have any questions regarding this message or your service.
Thanks for using the eFax service!
Home Contact Login
Powered by j2
2012 j2 Global Communications, Inc. All rights reserved.
eFax is a registered trademark of j2 Global Communications, Inc.
This account is subject to the terms listed in the eFax Customer Agreement.
Or
Subject: New Order
Message Body:
Dear Sir/madam
Currently we are looking for supplier of your products.
We are interesting in your products in large quantity:
Kindly find attached a Purchase Order for what we need and quantity.
Please check and quote similar items.
Quote your best prices so we can place an order.
Thanks for your Kind Cooperation.
Asamul
Purchasing manager
ASTONISHING BUSINESS LLC
2763 MEADOW CHURCH RD. STE 207 DULUTH, GA 30097.
Attn,
We have made the payment to your account please check your bank
account and get back to us asap
----------------------------------------------------------------
This message was sent using IMP, the Internet Messaging Program.
Or
Subject: PURCHASE ORDER
Message Body:
SalesPerson / SalesManager,
My name is Smart Joachim and I am the procurement manager of waves
Trading Ltd.
We are a suppliers company to a lot of chain store and retail outlets in
California and Indeed over America. The product model we are asking
you to make
for , we have previously been supplied by a company in Guandong. However, due
to excessive demand, this supplier has been unable to meet up with the
delivery
schedules and the shortfall is beginning to bring a deficit on our
part. Please
note that Quality is very important to us. kindly download the attachment in
the folder to get full details of our order including required quantity and
pictures of a sample product model we have previously produced .
I. We currently have a client who is interested in buying your products.
Consequently, could you kindly provide a quotation for your said product with
the following details: Please provide quotations of at most 5
different product
designs and styles - for your most salable and newest items.
Please open/download the attached PURCHASE ORDER and give us all the
information we need as requested below.
1. Descr'+'iption of the Product -
2. MOQ (minimum order quantity) -
3. F.OB. Price - and Samples (for free or not?)
4. Port (FOB which port) - FOB
5. Packing details
6. Payment terms -
7. Delivery time (for mass production and for samples)-
II. Also, please provide us with a Catalogue of all the products your company
is currently manufacturing.
III. Also, please state your company type - manufacturing or trading? Our
client would like to visit
West Wales is typing...
West Wales: visit your company's factory/warehouse. Kindly state where your
factory / warehouse location is too. .
IV. Could you also give me your skype id or direct phone number; This is to
facilitate faster communication between us.
Your immediate response would be highly appreciated.
Thank you
Best Regard,
Smart Joachim
waves Trading Ltd.
48 W 27th St Frnt,New York, NY 10001
Or
Subject: New Order/ Inquiry
Message Body:
Dear Sir,
We write to inform you that we are interested in your products and the
attachment is sample needed.
We sincerely hope to establish a long-term business relations with your
esteemed corporation.
Please kindly send me your catalog,Please inform me about the Minimum
Order,Quantity Delivery time and Payment terms warranty.
Your early reply is highly appreciated.
Thank You.
Zhejiang/Wenzhou Tianniu Synthetic Leather Co., Ltd
Tell:86-507-86635197
Email : amaco_link@yahoo.com , amaco_link@vip.126.com
Web:www.tianneuleather.com
Or
Subject: Email dispatch of purchase order 2800362756
Message Body:
Dear Sir/Madam,
Hope you had a great holiday with your family and welcome back to work.
With reference to your quotation and the subsequent negotiation, we are
please to award the attached purchase order on you for supply of material /
providing service, subject to terms and conditions stated in the purchase
order and it's annexure.
Please also endeavour to unzip the order as it is too large so you have to
extract
to enable you view the product.
Kindly acknowledge the receipt of this order and send your order acceptance
at the earliest.
Thanking you,
For Ambuja Tradings Limited
Or
Subject: PAYMENT CONFIRMATION
Message Body:
Hello.
Find attached payment confirmation as discussed.Regards
Singh
Or
Subject: Your transaction is completed
Message Body:
Transaction is completed. $11231869 has been successfully transferred.
If the transaction was made by mistake please contact our customer service.
Receipt of payment is attached.
*** This is an automatically generated email, please do not reply ***
Bank of America, N.A. Member FDIC. Equal Housing Lender Opens in new window
2013 Bank of America Corporation. All rights reserved N/A
Or
Subject: Your transaction is completed
Message Body:
Transaction is completed. $07740449 has been successfully transferred.
If the transaction was made by mistake please contact our customer service.
Receipt of payment is attached.
*** This is an automatically generated email, please do not reply ***
Bank of America, N.A. Member FDIC. Equal Housing Lender Opens in new window
Š 2013 Bank of America Corporation. All rights reserved
Or
Subject: PURCHASE ORDER 3025
Message Body:
Hi,
Kindly check the attached purchase order and arrange to despatch the
materials as soon as possible.
Take action with respect to the consolidation of the purchase order
and address the P/I.
Regards
Dmitrijs.Laura
Phone: 381 78945871
Fax: 381 7892564123
Or
Subject: IRON EXE_Attachment _
Message Body:
Good day
our company wants to buy a large quantity of your products
please kindly open the above attached file to view all
our new order and product samples we need to purchase from you for you to send us your
proforma invoice ( P.I.)
please also advise us on the delivery time for we want to make a big purchase from you
after you might have viewed our order in the attachment we sent
we await your prompt response as soon as possible
regards
Rhona Chris,
International purchasing manager
Broadwalk company INC
Sir/Madam
The attached payment advice is issued at the request of our customer. The advice is for your reference only.
Yours faithfully
Global Payments and Cash Management
HSBC
***************************************************************************
This is an auto-generated email, please DO NOT REPLY. Any replies to this email will be disregarded.
***************************************************************************
This e-mail is confidential. It may also be legally privileged. If you are not the addressee you may not copy, forward, disclose or use any part of it. If you have received this message in error, please delete it and all copies from your system and notify the sender immediately by return e-mail. Internet communications cannot be guaranteed to be timely, secure, error or virus-free. The sender does not accept liability for any errors or omissions.
***************************************************************************
"SAVE PAPER - THINK BEFORE YOU PRINT!"
Or
Subject: Payment Confirmation
Message Body:
Good Morning
My name is Ellen Martinez,i was asked by my boss to send you the payment been made ??Earlier today.
Kindly see the attached payment slip for confirmation. Thus acknowledge the receipt of payment been made.
Thanks
Or
Subject: T/T copy for new order
Message Body:
Dear Sir,
Confirm your delivery schedule
Kindly check the attached TT deposit copy of your invoice and arrange
to dispatch the
materials as soon as possible.
Take action with respect to the consolidation of the purchase order
and address the P/I asap.
:20A SENDER'S REFERENCE
11044TRF12008119: 23B BANK OPERATION CODE
CRED: 32A CURRENCY/INTERBANK SETTLEMENT
131502US19744,64: 33B CURRENCY/INSTRUCTED AMOUNT
US31000: 50K ORDERING CUSTOMER
/AL36213110440000000000933729
W.T.M
Please check with your bank and confirm asap.
Thanks,
peter
PURCHASING MANAGER
PTY EMBELTON LTD
Or
Subject: purchase order
Message Body:
Greetings,
Attached to this mail is our purchase order, please furnish us with a proforma invoice and terms of payment as soon as possible.
We await to hear from you.
Thanks
Regards
Anthony
LINYI WANXIN ENAMEL PRODUCTS CO.,LTD
Email: farzaneh@amirtrading.comby reply e-mail and immediately and permanently delete this message and any attachments. Thank you."
*****************************************************************************
Sir/Madam
The attached payment advice is issued at the request of our customer. The advice is for your reference only.
Yours faithfully
Global Payments and Cash Management
HSBC
***************************************************************************
This is an auto-generated email, please DO NOT REPLY. Any replies to this email will be disregarded.
***************************************************************************
This e-mail is confidential. It may also be legally privileged. If you are not the addressee you may not copy, forward, disclose or use any part of it. If you have received this message in error, please delete it and all copies from your system and notify the sender immediately by return e-mail. Internet communications cannot be guaranteed to be timely, secure, error or virus-free. The sender does not accept liability for any errors or omissions.
***************************************************************************
"SAVE PAPER - THINK BEFORE YOU PRINT!"
Or
Message Body:
Dear Sir or Madam,
We noticed that jewelry is your main business line which is our main
products too.
We will like to maintan a cordial business relationship with you.
Confirm the attached Catalogue
If you have any needs please don?t hesitate to contact us.
Hope to hear from you soon.
Sincerely
Michael Li
KAGARI PTE.,LTD.
Room 1405, No 322 Xianxia Road, Changning District, Shanghai China 200336
Mobiel: +86 18019487510
Tel: +86-21-62707523*815 or 62707522*815
Fax: +86-21-62707517
Or
Subject: Fw:New Order For 12 Containers
Message Body:
Dear Sirs,
I obtained catalogue of your products at the Canton fair, where I got
your contact details.
Upon reviewing your catalogue, we are interested in your products.
Kindly find the order enclosed as attachment.
Please send the best FOB price and the following...
1, MOQ
2, In how many colors can we choose a model?
3, Pictures of the available colors
4,Warranty
Hopefully you can assist us with this inquiry as soon as possible.
Thanks & Kind regards,
Eng. Alice Lee
Import Coordinator
Export-Import Department
E- COMPANY FOR TRADING INC.
.......................................
, 2, 3 block 13021 1st industrial zone,
5th Floor, Bishop's Square, Redmond's Hill, Dublin 2, Ireland
+353 1 476 3400 FAX:
+353 1 476 3406
Cisco Security Intelligence Operations analysts examine real-world email traffic data that is collected from over 100,000 contributing organizations worldwide. This data helps provide a range of information about and analysis of global email security threats and trends. Cisco will continue to monitor this threat and automatically adapt systems to protect customers. This report will be updated if there are significant changes or if the risk to end users increases.
Cisco security appliances protect customers during the critical period between the first exploit of a virus outbreak and the release of vendor antivirus signatures. Email that is managed by Cisco and end users who are protected by Cisco Web Security Appliances will not be impacted by these attacks. Cisco security appliances are automatically updated to prevent both spam email and hostile web URLs from being passed to the end user.
The security vulnerability applies to the following combinations of products.
Primary Products:
IntelliShield
Threat Outbreak Alert
Original Release Base
Associated Products:
N/A
Alerts and bulletins on the Cisco Security Intelligence Operations Portal are highlighted by analysts in the
Cisco Threat Operations Center and represent a subset of the comprehensive content that is available through Cisco Security IntelliShield Alert Manager Service.
This customizable threat and vulnerability alert service provides security staff with access to timely, accurate, and credible information about threats and vulnerabilities that may affect their environment. Cisco is pleased to offer a free trial of the service.
To register for full access, please visit the IntelliShield trial registration page.
LEGAL DISCLAIMER The urgency and severity ratings of this alert are not tailored to individual users; users may value alerts differently based upon their network configurations and circumstances. THE ALERT, AND INFORMATION CONTAINED THEREIN, ARE PROVIDED ON AN "AS IS" BASIS AND DO NOT IMPLY ANY KIND OF GUARANTEE OR WARRANTY, INCLUDING THE WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR USE. YOUR USE OF THE ALERT, AND INFORMATION CONTAINED THEREIN, OR MATERIALS LINKED FROM THE ALERT, IS AT YOUR OWN RISK. INFORMATION IN THIS ALERT AND ANY RELATED COMMUNICATIONS IS BASED ON OUR KNOWLEDGE AT THE TIME OF PUBLICATION AND IS SUBJECT TO CHANGE WITHOUT NOTICE. CISCO RESERVES THE RIGHT TO CHANGE OR UPDATE ALERTS AT ANY TIME.
