<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40"><head><meta http-equiv=Content-Type content="text/html; charset=utf-8"><meta name=Generator content="Microsoft Word 15 (filtered medium)"><style><!--
/* Font Definitions */
@font-face
{font-family:Helvetica;
panose-1:2 11 6 4 2 2 2 2 2 4;}
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Consolas;
panose-1:2 11 6 9 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
pre
{mso-style-priority:99;
mso-style-link:"HTML Preformatted Char";
margin:0in;
margin-bottom:.0001pt;
font-size:10.0pt;
font-family:"Courier New";}
p.msonormal0, li.msonormal0, div.msonormal0
{mso-style-name:msonormal;
mso-margin-top-alt:auto;
margin-right:0in;
mso-margin-bottom-alt:auto;
margin-left:0in;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
span.HTMLPreformattedChar
{mso-style-name:"HTML Preformatted Char";
mso-style-priority:99;
mso-style-link:"HTML Preformatted";
font-family:Consolas;}
span.EmailStyle21
{mso-style-type:personal-reply;
font-family:"Calibri",sans-serif;
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]--></head><body lang=EN-US link=blue vlink=purple><div class=WordSection1><p class=MsoNormal>Yup. If there is such a company, I’d forward the message (with a warning) to their fraud department for investigation. If not, toast it. That file is dangerous. Companies do not like scammers taking their good names in vain to distribute malware.<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal><o:p> </o:p></p><div><div style='border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0in 0in 0in'><p class=MsoNormal><b>From:</b> Ipg-smz <ipg-smz-bounces@netpress.org> <b>On Behalf Of </b>Curtis Franklin via Ipg-smz<br><b>Sent:</b> Monday, October 21, 2019 3:20 PM<br><b>To:</b> dennisf63@wildblue.net; Ken Hess via Ipg-smz <ipg-smz@netpress.org><br><b>Cc:</b> Curtis Franklin <curtis_franklin@cf2group.com><br><b>Subject:</b> Re: [Ipg-smz] Balfour Beatty<o:p></o:p></p></div></div><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>Common malware-delivery email. And not a particularly clever one.<o:p></o:p></p><div><p class=MsoNormal><o:p> </o:p></p></div><div><p class=MsoNormal>Your instincts were correct — terminate the message (and its attachment) with extreme prejudice.<o:p></o:p></p></div><div><p class=MsoNormal><o:p> </o:p></p></div><div><p class=MsoNormal>Curt<o:p></o:p></p></div><div><p class=MsoNormal><o:p> </o:p></p><div><div><div><div><div><div><div><div><div><div><div><p class=MsoNormal><span style='font-family:"Helvetica",sans-serif;color:black'>Curtis Franklin, Jr.<br>Journalist<br>Senior Editor, <i>Dark Reading</i><br>Co-host, <i>This Week in Enterprise Tech</i><br><a href="mailto:curtis_franklin@cf2group.com">email: curtis_franklin@cf2group.com</a><br>twitter: kg4gwa<br>voice: +1 352 331 1311<br><a href="https://www.linkedin.com/in/curtisfranklin">https://www.linkedin.com/in/curtisfranklin</a><br><a href="https://authory.com/CurtisFranklin">https://authory.com/CurtisFranklin</a><o:p></o:p></span></p></div></div></div></div></div></div></div></div></div></div></div><div><p class=MsoNormal><br><br><o:p></o:p></p><blockquote style='margin-top:5.0pt;margin-bottom:5.0pt'><div><p class=MsoNormal>On Oct 21, 2019, at 15:03, Dennisf63 via Ipg-smz <<a href="mailto:ipg-smz@netpress.org">ipg-smz@netpress.org</a>> wrote:<o:p></o:p></p></div><p class=MsoNormal><o:p> </o:p></p><div><div><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'>Okay, this is a new one. The attachment, which I downloaded and saved and I carefully do NOT include here, is labeled Notice.iso with that cute cd as an icon. <o:p></o:p></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'>Why am I suspicious?. I've never heard of these people, and I don't think I've used any propane in 20 years (all electric house), and I just have the feeling that the attachment, should I attempt to open it (I won't), might be toxic. <o:p></o:p></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'>Any thoughts, experience with this type of bait?<o:p></o:p></p><div><p class=MsoNormal><br><br>-------- Forwarded Message -------- <o:p></o:p></p><table class=MsoNormalTable border=0 cellspacing=0 cellpadding=0><tr><td nowrap valign=top style='padding:0in 0in 0in 0in'><p class=MsoNormal align=right style='text-align:right'><b>Subject: <o:p></o:p></b></p></td><td style='padding:0in 0in 0in 0in'><p class=MsoNormal>Balfour Beatty<o:p></o:p></p></td></tr><tr><td nowrap valign=top style='padding:0in 0in 0in 0in'><p class=MsoNormal align=right style='text-align:right'><b>Date: <o:p></o:p></b></p></td><td style='padding:0in 0in 0in 0in'><p class=MsoNormal>Mon, 21 Oct 2019 11:05:17 -0700<o:p></o:p></p></td></tr><tr><td nowrap valign=top style='padding:0in 0in 0in 0in'><p class=MsoNormal align=right style='text-align:right'><b>From: <o:p></o:p></b></p></td><td style='padding:0in 0in 0in 0in'><p class=MsoNormal><a href="mailto:curtis@gulfcoastpropane.com">curtis@gulfcoastpropane.com</a> <a href="mailto:curtis@gulfcoastpropane.com"><curtis@gulfcoastpropane.com></a><o:p></o:p></p></td></tr></table><p class=MsoNormal style='margin-bottom:12.0pt'><o:p> </o:p></p><pre>Good Day Sir/Ma ,<o:p></o:p></pre><pre><o:p> </o:p></pre><pre>Our records indicate that you have an outstanding balance with a due date of 10/25/2019. We have yet to receive this payment. Please find a copy of the invoice enclosed.<o:p></o:p></pre><pre><o:p> </o:p></pre><pre>If this amount has already been paid and sent, please disregard this notice and we apologize for any inconvenience. Otherwise, please forward us the amount stated above that is past due by [10/28/2019. As our written agreement states, we will start charging a 5% interest charge for any outstanding balance greater than 30 days.<o:p></o:p></pre><pre><o:p> </o:p></pre><pre>Thank you for your cooperation regarding this matter. We sincerely hope we can continue doing business together in the future.<o:p></o:p></pre><pre><o:p> </o:p></pre><pre>Sincerely,<o:p></o:p></pre><pre>MESSE MЬNCHEN GMBH<o:p></o:p></pre><pre>Messegelдnde<o:p></o:p></pre><pre>81823 Mьnchen<o:p></o:p></pre><pre><o:p> </o:p></pre><pre>Tel.: +49 89 949-20720<o:p></o:p></pre><pre>Fax: +49 89 949-20729<o:p></o:p></pre><pre><o:p> </o:p></pre></div></div><p class=MsoNormal><Notice.iso>-- <br>Ipg-smz mailing list<br><a href="mailto:Ipg-smz@netpress.org">Ipg-smz@netpress.org</a><br><a href="http://netpress.org/mailman/listinfo/ipg-smz_netpress.org">http://netpress.org/mailman/listinfo/ipg-smz_netpress.org</a><o:p></o:p></p></div></blockquote></div><p class=MsoNormal><o:p> </o:p></p></div></div></body></html>