NUEVO MAIL QUE ANEXA FICHERO DE EXCEL CON MACROS MALICIOSAS

Otro mail que anexa fichero malicioso, esta vez uno de EXCEL con macros…

TEXTO DEL MAIL
______________

Asunto: Payment advice_ 0030_0004534379_20191119
De: “IZM Transport Pte Ltd” <antonella.muschio@maersk.com>
Fecha: 19/11/2019 23:59
Para: destinatario

Good morning,

This is my invoice for the ‘initial payment’ as described in the T&C’s.

Best Regards,

LDE PVT LTD.

Everything in this e-mail and the contents of any attachments are confidential, may be legally privileged and are intended solely for the use of the individual to whom it is addressed. If you are not the intended recipient please delete it and do not disclose, forward or copy this message or its attachments.

anexado: letter Invoice_form 073 19 Nov 19.xls —> con macros maliciosas

_____________

total>

Como puede verse en el informe, los AV lo detectan como TrojanDownloader:O97M/MalSpam!MTB

Se recuerda una vez mas que no deben ejecutarse los ficheros anexados a mails no solicitados, y menos si son DOC o RTF con macros !!! :

May try to run other files, shell commands or applications.
Seems to contain deobfuscation code.
Makes use of macros

saludos

ms, 20-11-2019