“Your Air France boarding documents on 10Jul” Spam run

Another day another mass batch of docm virus attempts. Yet another reason to block them on your e-mail servers.

From: Air France <cartedembarquement@airfrance.fr>
Date: Tue 28/07/2015 10:00
Subject: Your Air France boarding documents on 10Jul
Message Id: <REDACTED.JavaMail.tomcat@kl1247sb.is.klmcorp.net>
Attachment: Boarding-documents.docm
Attached is your Air France boarding pass.
Attached is your boarding pass in PDF format.
Important information
? Your boarding pass in PDF format is only valid when printed. Please print this document and present it at the airport.
Please print your boarding pass in PDF format.

If you are not able to print your boarding pass, please print it at the airport, using a Self-Service Kiosk or at a check-in counter.

Thank you for choosing Air France. We wish you a pleasant flight. This is an automatically generated e-mail. Please do not reply.

Legal notice
Air France is committed to protecting your privacy. Our privacy policy specifies:
• how we use the data we collect about you
• the measures we employ to protect your privacy.
You will also find the procedure for limiting the use of your data.

It has also used the subject line of “Your Air France boarding documents on 3Aug”

The attachment was SHA256 c1c7e9d31033442f9baf34802a238575f2a8acf820f887dcba102413139c2c5d
VirusTotal Report

And also SHA256 f03a64d0a9715ad366e110e72ec3efb7ed268bf4f76a0512025d02aa74da09da
VirusTotal Report

Advertisements
This entry was posted in Uncategorized. Bookmark the permalink.

Comment on this topic

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s