Wednesday, 17 December 2014

document malware: UAE EXCHANGE PAYMENT INSTRUCTION

This one has just landed...

Subject: UAE EXCHANGE 32,000USD PAYMENT INSTRUCTION
To: finance@uaeexchange.com
From: "finance@uaeexchange.com"
Date: Wed, 17 Dec 2014 08:43:13 +0000
Reply-To: 123@GMAIL.COM

Hello,

Please find attached payment instruction below and fill in the details as y=
our client has requested from us to send you the payment before Friday 19th=
 Dec 2014.
Fill in and resend the attached payment instruction to our email below so w=
e can proceed with the payment immediately once we receive your response.
Your earlier reply is appreciated to avoid delay in payment process and avo=
id delay in our customer goods shipment.
If you have any questions you can call our numbers detailed or email to us =
with any assiatance needed.

Thank you
Best Regards
Sohel A Gani
Dubai International City
Shop No. 1, CBD 29, Al Warsan First, International City, Dubai
Phone: +971-4-4312691
Fax: +971-4-4310931
Email: Finance@uae-exchange.com
Business Hours: Sat - Thu: 8:00 A.M. - 10:00 P.M., Fri: 8.00 A.M. =E2=80=93=
 11.30 A.M, 1.30 P.M. =E2=80=93 10.00 P.M.=20
 

Contains two documents, a Word document (.doc) and a Microsoft Office Open XML format .ppsx document:

UAE EXCHANGE 32,000USD PAYMENT INSTRUCTION.doc (VirusTotal)
[Exploit.RTF.CVE-2012-015]

UAE EXCHANGE 32,000USD PAYMENT  INSTRUCTION.ppsx (VirusTotal)
[Exploit.CVE-2014-6352]

Cheers,

Steve
Sanesecurity.com

No comments: