<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
</head>
<body>
<p>I get crap like this quite often. Messages like this one that say
'Dear Sir/Ma ' should be a sign of an obvious scam. I get stuff
addressed to 'Dearly Beloved' or 'Beloved in Christ' or other BS.
I don't get the Irish Sweepstakes mails, but a lot of other mail -
about requests for proposals, or unpaid invoices, or attached
purchase orders, and obvious traps like that squeak past the BS
detector in my mail client. <br>
</p>
<p>This morning, I got an authentic looking email from 'AOL' about a
device trying to log in. <br>
</p>
<p>I'm probably stating the obvious, but I would be very surprised
if we don't all get these usually blatantly obvious scams or
phishing messages. <br>
</p>
<p>The 'Balfour Beatty' message shows all the signs of an obvious
scam or attempt at infection. <br>
</p>
<p><br>
</p>
<p>(Of course, 'Message has been disinfected' may show that your
antivirus or anti-malware was able to detect the malicious code in
the message or its attachment, and just cleaned it up -- or, OTOH,
a particularly crafty criminal figured that, if he or she sent a
message with the SUBJECT including 'has been disinfected,' you may
be more likely to open the 'disinfected' attachment.)</p>
<p>In any case, I'd avoid this.<br>
</p>
<div class="moz-cite-prefix">On 10/21/2019 12:15 PM, Evan Schuman
via Ipg-smz wrote:<br>
</div>
<blockquote type="cite"
cite="mid:0fee01d58843$f4eb37e0$dec1a7a0$@thecontentfirm.com">
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
<meta name="Generator" content="Microsoft Word 15 (filtered
medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Verdana;
panose-1:2 11 6 4 3 5 4 4 2 4;}
@font-face
{font-family:Consolas;
panose-1:2 11 6 9 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman",serif;
color:black;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
pre
{mso-style-priority:99;
mso-style-link:"HTML Preformatted Char";
margin:0in;
margin-bottom:.0001pt;
font-size:10.0pt;
font-family:"Courier New";
color:black;}
p.msonormal0, li.msonormal0, div.msonormal0
{mso-style-name:msonormal;
mso-margin-top-alt:auto;
margin-right:0in;
mso-margin-bottom-alt:auto;
margin-left:0in;
font-size:12.0pt;
font-family:"Times New Roman",serif;
color:black;}
span.HTMLPreformattedChar
{mso-style-name:"HTML Preformatted Char";
mso-style-priority:99;
mso-style-link:"HTML Preformatted";
font-family:Consolas;
color:black;}
span.EmailStyle21
{mso-style-type:personal-reply;
font-family:"Verdana",sans-serif;
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
<div class="WordSection1">
<p class="MsoNormal"><span
style="font-family:"Verdana",sans-serif;color:windowtext">Not
sure, but something about what you sent freaked out my AV
software. The subject line was changed for me to “Message
has been disinfected.”<o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-family:"Verdana",sans-serif;color:windowtext"><o:p> </o:p></span></p>
<div>
<p class="MsoNormal"
style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span
style="font-size:10.0pt;font-family:"Arial",sans-serif;color:#1F497D">_______</span><span
style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:windowtext"><o:p></o:p></span></p>
<p class="MsoNormal"
style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span
style="font-size:10.0pt;font-family:"Arial",sans-serif;color:#1F497D">Evan
Schuman</span><span
style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:windowtext"><o:p></o:p></span></p>
<p class="MsoNormal"
style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span
style="font-size:10.0pt;font-family:"Arial",sans-serif;color:#1F497D"><a
href="mailto:eschuman@thecontentfirm.com"
target="_blank" moz-do-not-send="true">eschuman@thecontentfirm.com</a></span><span
style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:windowtext"><o:p></o:p></span></p>
<p class="MsoNormal"
style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span
style="font-size:10.0pt;font-family:"Arial",sans-serif;color:#1F497D"><a
href="tel:973-993-8098" target="_blank"
moz-do-not-send="true">973-993-8098</a> (voice)<o:p></o:p></span></p>
<p class="MsoNormal"
style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span
style="font-size:10.0pt;font-family:"Arial",sans-serif;color:#1F497D">Computerworld
weekly columnist (Column archive: <a
href="http://www.thecontentfirm.com/weekly-column-on-computerworld"
target="_blank" moz-do-not-send="true">http://www.thecontentfirm.com/weekly-column-on-computerworld</a>)</span><span
style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:windowtext"><o:p></o:p></span></p>
<p class="MsoNormal"
style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span
style="font-size:10.0pt;font-family:"Arial",sans-serif;color:#1F497D">Moderator
for MIT Sloan Management Review events<o:p></o:p></span></p>
<p class="MsoNormal"
style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span
style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D">Google
Search: <a href="http://lmgtfy.com/?q=Evan+Schuman"
moz-do-not-send="true">http://lmgtfy.com/?q=Evan+Schuman#</a><o:p></o:p></span></p>
<p class="MsoNormal"
style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span
style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D"><a
href="https://twitter.com/eschuman" target="_blank"
moz-do-not-send="true">https://twitter.com/eschuman</a></span><span
style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:windowtext"><o:p></o:p></span></p>
<p class="MsoNormal"
style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span
style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D"><a
href="http://www.linkedin.com/in/schumanevan/"
target="_blank" moz-do-not-send="true">www.linkedin.com/in/schumanevan/</a></span><span
style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:windowtext"><o:p></o:p></span></p>
<p class="MsoNormal"
style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><i><span
style="font-size:8.0pt;font-family:"Calibri",sans-serif;color:#1F497D">Member,
Internet Press Guild: <a href="http://netpress.org/"
target="_blank" moz-do-not-send="true"><span
style="color:#1155CC">http://netpress.org/</span></a></span></i><span
style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:windowtext"><o:p></o:p></span></p>
</div>
<p class="MsoNormal"><span
style="font-family:"Verdana",sans-serif;color:windowtext"><o:p> </o:p></span></p>
<div>
<div style="border:none;border-top:solid #E1E1E1
1.0pt;padding:3.0pt 0in 0in 0in">
<p class="MsoNormal"><b><span
style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:windowtext">From:</span></b><span
style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:windowtext">
Ipg-smz <a class="moz-txt-link-rfc2396E" href="mailto:ipg-smz-bounces@netpress.org"><ipg-smz-bounces@netpress.org></a> <b>On
Behalf Of </b>Dennisf63 via Ipg-smz<br>
<b>Sent:</b> Monday, October 21, 2019 3:03 PM<br>
<b>To:</b> <a class="moz-txt-link-abbreviated" href="mailto:ipg-smz@netpress.org">ipg-smz@netpress.org</a><br>
<b>Cc:</b> Dennisf63 <a class="moz-txt-link-rfc2396E" href="mailto:dennisf63@wildblue.net"><dennisf63@wildblue.net></a><br>
<b>Subject:</b> Message has been disinfected :[Ipg-smz]
Fwd: Balfour Beatty<o:p></o:p></span></p>
</div>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
<p>Okay, this is a new one. The attachment, which I downloaded
and saved and I carefully do NOT include here, is labeled
Notice.iso with that cute cd as an icon. <o:p></o:p></p>
<p>Why am I suspicious?. I've never heard of these people, and I
don't think I've used any propane in 20 years (all electric
house), and I just have the feeling that the attachment,
should I attempt to open it (I won't), might be toxic. <o:p></o:p></p>
<p>Any thoughts, experience with this type of bait?<o:p></o:p></p>
<div>
<p class="MsoNormal"><br>
<br>
-------- Forwarded Message -------- <o:p></o:p></p>
<table class="MsoNormalTable" cellspacing="0" cellpadding="0"
border="0">
<tbody>
<tr>
<td style="padding:0in 0in 0in 0in" valign="top"
nowrap="nowrap">
<p class="MsoNormal" style="text-align:right"
align="right"><b>Subject: <o:p></o:p></b></p>
</td>
<td style="padding:0in 0in 0in 0in">
<p class="MsoNormal">Balfour Beatty<o:p></o:p></p>
</td>
</tr>
<tr>
<td style="padding:0in 0in 0in 0in" valign="top"
nowrap="nowrap">
<p class="MsoNormal" style="text-align:right"
align="right"><b>Date: <o:p></o:p></b></p>
</td>
<td style="padding:0in 0in 0in 0in">
<p class="MsoNormal">Mon, 21 Oct 2019 11:05:17 -0700<o:p></o:p></p>
</td>
</tr>
<tr>
<td style="padding:0in 0in 0in 0in" valign="top"
nowrap="nowrap">
<p class="MsoNormal" style="text-align:right"
align="right"><b>From: <o:p></o:p></b></p>
</td>
<td style="padding:0in 0in 0in 0in">
<p class="MsoNormal"><a
href="mailto:curtis@gulfcoastpropane.com"
moz-do-not-send="true">curtis@gulfcoastpropane.com</a>
<a href="mailto:curtis@gulfcoastpropane.com"
moz-do-not-send="true"><curtis@gulfcoastpropane.com></a><o:p></o:p></p>
</td>
</tr>
</tbody>
</table>
<p class="MsoNormal" style="margin-bottom:12.0pt"><o:p> </o:p></p>
<pre>Good Day Sir/Ma ,<o:p></o:p></pre>
<pre><o:p> </o:p></pre>
<pre>Our records indicate that you have an outstanding balance with a due date of 10/25/2019. We have yet to receive this payment. Please find a copy of the invoice enclosed.<o:p></o:p></pre>
<pre><o:p> </o:p></pre>
<pre>If this amount has already been paid and sent, please disregard this notice and we apologize for any inconvenience. Otherwise, please forward us the amount stated above that is past due by [10/28/2019. As our written agreement states, we will start charging a 5% interest charge for any outstanding balance greater than 30 days.<o:p></o:p></pre>
<pre><o:p> </o:p></pre>
<pre>Thank you for your cooperation regarding this matter. We sincerely hope we can continue doing business together in the future.<o:p></o:p></pre>
<pre><o:p> </o:p></pre>
<pre>Sincerely,<o:p></o:p></pre>
<pre>MESSE MЬNCHEN GMBH<o:p></o:p></pre>
<pre>Messegelдnde<o:p></o:p></pre>
<pre>81823 Mьnchen<o:p></o:p></pre>
<pre><o:p> </o:p></pre>
<pre>Tel.: +49 89 949-20720<o:p></o:p></pre>
<pre>Fax: +49 89 949-20729<o:p></o:p></pre>
<pre><o:p> </o:p></pre>
</div>
</div>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
</blockquote>
</body>
</html>