Friday, 20 February 2015

Teresa Byron supply only quotation ECY Armco

Teresa Byron supply only quotation ECY Armco emails are being spammed out, with a zip attachment
Note: It's also worth remembering that the company itself  may not have any knowledge of this email and it's link(s) or attachment as it won't have come from their servers and IT systems but from an external bot net.

It's not advised to ring them as there won't really be anything they can do to help you.
Message Header:
From: {wendy@burwoodsupply.co.uk}Subject: supply only quotation 16822 in total

Message Body

Hi
 Attached are 1 quotes so far they are in excel format so they can be altered if necessary (I normally only send the quotes in PDF so they can’t be altered but Mike asked me not to do this).

The rest to follow tomorrow a.m.

Regards

Teresa Byron

Office Administrator

 ECY  Armco
 Barley Castle Lane, Appleton Thorn, Warrington, Cheshire, WA4 4RB
 t: +44(0)1925 860000  f: +44(0)1925 861111
www.ecyltd.co.uk
Attachment:
quotes.zip
Inside the Zip is a Windows Executable:
quotes.exe

Md5 Hashes:
 88b675427fa05236a3f3e03a68ac600f  [1]

Malware information:

VirusTotal Report [1] (hits 8/57 Virus Scanners)
Cheers,

Steve

No comments: