Wednesday, 1 April 2015

CIH Delivery Note 0051037484 Batchuser BATCHUSER


CIH Delivery Note Combined Independents (Holdings) Ltd Batchuser BATCHUSER  emails with an attached word document containing a macro.

These emails aren't from these companies at all , they are just being used to make the email look more genuine, ie. from a real company.

Message Header::
From: Batchuser BATCHUSER {ecommsupport@cihgroup.com}
Subject: CIH Delivery Note 0051037484
Just a quick update to point out that these were 0 hour detected by Sanesecurity:
Sanesecurity Detection (ClamAV 3rd Party Signatures)
Sanesecurity.Malware.24784.XmlHeurGen.Ng
Cheers,
Steve

No comments: