Another load of spam today… Once again using .docm files which are already blocked across “my estate”.
Subject: TP E-Billing for Jul 15 Seq No 0006 (0866AER147) Region 033
Please find the following attached E-Billing documents:
Jul 15 Seq No 0006 – Invoice 0866AER147
The attachment, 0866AER147.docm, is here:
When macros are enabled the document downloads:
This spam run is related to another one with a different subject and content of e-mail:
Other variants of this e-mail are now coming through with the following sender and subjects: