NUEVO MAIL QUE SE RECIBE APARENTANDO SER DEL BANCO DE VIZCAYA

Hoy se están recibiendo varios mails con similares caracteristicas, anexando fichero con extension DOC que realmente es un RTF con Exploit malicioso (Exploit.RTF.CVE-2017-11882.gen)

TEXTO DEL MAIL
______________

Date sent: Tue, 29 Oct 2019 10:22:00 +0200
From: Confirming.bbva@bbva.com
To: Confirming.bbva@bbva.com
Subject: BBVA-Confirming Factura

graphic

Muy srs. Nuestra:

Nos complace adjuntar información relacionada con la factura.

Este mensaje se envía automáticamente desde BBVA como medio de información a través del correo electrónico proporcionado.

Reciba un cordial saludo.

Banco Bilbao Vizcaya Argentaria, SA

ANEXADO: BBVA-Confirming Factura.DOC —> REALMENTE ES UN RFTF CON EXPLOIT MALICIOSO (Exploit.RTF.CVE-2017-11882.gen)

Please do not respond to this email as this is an automated email only for notifications. If you have any question or suggestion you can contact us at:

Phone: 919190297
Fax: 919190341
Email: INFOPROVEDORESBBVAF @ BBVA.COM

If you are a BBVA customer, you can operate and make inquiries through www.bbvanetcash.com or www.bbvanetoffice.com . If you are not a BBVA customer, you can do it comfortably through www.BBVAnetadvance.com .
Legal warning:

This message is only for the person to whom it is addressed. It may contain confidential or legally protected information. There is no waiver of confidentiality or privilege for any bad / erroneous transmission. If you have received this message in error, please delete the message as well as all copies of it from your system, destroy all copies of it from your hard drive and notify the sender. You must not, directly or indirectly, use, disclose, distribute, print or copy any of the parts of this message if you are not the recipient. Any opinion expressed in this message comes from the sender, except when the message states otherwise and the sender is authorized to establish that such opinions come from GrupoBBVA. Note that electronic mail via Internet does not guarantee the confidentiality of the messages that are transmitted nor the correct reception of them. In the event that the recipient of this message does not consent to the use of electronic mail via the Internet, please inform us immediately.

_____________

El analisis de virustotal ofrece el siguiente informe>

Como siempre advertimos, no se deben abrir ficheros adjuntos a mails no solicitados, ni pulsar en imagenes o enlaces, recordando que especialmente los ficheros anexados con extensión DOC pueden tener doble malicia, por integrar macros maliciosas o por ser realmente RTF con exploits, como varios casos de hoy

Esperando que lo indicado les será de utilidad, reciban saludos.

ms, 29-10-2019