OTRO MAIL, ESTA VEZ CON TEXTO EN INGLES, QUE ANEXA FICHERO INFECTADO

Está llegando masivamente nuevo mail anexando fichero infectado

El texto del mail es el siguiente:

______________

Asunto: PURCHASE ORDER #98488 DC Demetriades ctr 98488
De: Davud Hamza <davud@inecco.net>
Fecha: 27/02/2019 18:09
Para: “destinatario”

Good Morning,

You have been in correspondence with my colleague regarding our large order.

Earlier last week, she put to bed and is on maternity leave.
Here find attached our final confirmed order for the first quarter of the year.

Kindly revert with your order confirmation and proforma invoice.
We have agreed to your proposal of 30% advanced payment at order confirmation.

Waiting for your kind reply with the OC.

Our complete company details are available on the order attached.

I am available if you may need further information.

Thanks and Best regards

Davud Hamza

Head of Puchases Department

VANADIUM COMPANY
Ljevčanska 64
78250 Laktaši
+387 51 533-400
vanadijum@inecco.net

anexado : 288057495875_578746865.iso —> contiene fichero malicioso 288057495875_578746865.com

____________

El fichero que contiene, 288057495875_578746865.com, total>

Dicho malware lo pasamos a controlar a partir del ELISTARA 40.77 de hoy como KEYLOGGER REMCOS.

saludos

ms, 27-2-2019