MX Lab, http://www.mxlab.eu, started to intercept a new malware distribution campaign by email with the subject “scanned document”. The fake emails is created in such a way that it appears to be sent by the company Charisma Bathrooms Limited but this is not the case.
This email is send from the spoofed address “Tara Savill <firstname.lastname@example.org>” and has the following body:
Charisma Bathrooms Limited
Unit 42 Shire Hill Industrial Estate
T: 01799 528 770
F: 01799 528 530
I am using the Free version of SPAMfighter.
SPAMfighter has removed 10569 of my spam emails to date.
Do you have a slow PC? Try a free scan!
The attached file CCF26062014_00002.docm is a Word file with malicious macro.