[Ipg-smz] Balfour Beatty

[Curtis Franklin]

Common malware-delivery email. And not a particularly clever one.

Your instincts were correct — terminate the message (and its attachment) with extreme prejudice.

Curt

Curtis Franklin, Jr.
Journalist
Senior Editor, Dark Reading
Co-host, This Week in Enterprise Tech
email: curtis_franklin at cf2group.com
twitter: kg4gwa
voice: +1 352 331 1311
https://www.linkedin.com/in/curtisfranklin
https://authory.com/CurtisFranklin

> On Oct 21, 2019, at 15:03, Dennisf63 via Ipg-smz <ipg-smz at netpress.org> wrote:
> 
> Okay, this is a new one. The attachment, which I downloaded and saved and I carefully do NOT include here, is labeled Notice.iso with that cute cd as an icon. 
> 
> Why am I suspicious?. I've never heard of these people, and I don't think I've used any propane in 20 years (all electric house), and I just have the feeling that the attachment, should I attempt to open it (I won't), might be toxic. 
> 
> Any thoughts, experience with this type of bait?
> 
> 
> 
> -------- Forwarded Message --------
> Subject:	Balfour Beatty
> Date:	Mon, 21 Oct 2019 11:05:17 -0700
> From:	curtis at gulfcoastpropane.com <mailto:curtis at gulfcoastpropane.com> <curtis at gulfcoastpropane.com> <mailto:curtis at gulfcoastpropane.com>
> 
> Good Day Sir/Ma ,
> 
> Our records indicate that you have an outstanding balance with a due date of 10/25/2019. We have yet to receive this payment. Please find a copy of the invoice enclosed.
> 
> If this amount has already been paid and sent, please disregard this notice and we apologize for any inconvenience. Otherwise, please forward us the amount stated above that is past due by [10/28/2019. As our written agreement states, we will start charging a 5% interest charge for any outstanding balance greater than 30 days.
> 
> Thank you for your cooperation regarding this matter. We sincerely hope we can continue doing business together in the future.
> 
> Sincerely,
> MESSE MЬNCHEN GMBH
> Messegelдnde
> 81823 Mьnchen
> 
> Tel.: +49 89 949-20720
> Fax: +49 89 949-20729
> 
> <Notice.iso>-- 
> Ipg-smz mailing list
> Ipg-smz at netpress.org
> http://netpress.org/mailman/listinfo/ipg-smz_netpress.org

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://netpress.org/pipermail/ipg-smz_netpress.org/attachments/20191021/0ab849a2/attachment.html>