Another day another mass batch of docm virus attempts. Yet another reason to block them on your e-mail servers.
From: Air France <firstname.lastname@example.org>
Date: Tue 28/07/2015 10:00
Subject: Your Air France boarding documents on 10Jul
Message Id: <REDACTED.JavaMail.email@example.com>
Attached is your Air France boarding pass.
Attached is your boarding pass in PDF format.
? Your boarding pass in PDF format is only valid when printed. Please print this document and present it at the airport.
Please print your boarding pass in PDF format.
If you are not able to print your boarding pass, please print it at the airport, using a Self-Service Kiosk or at a check-in counter.
Thank you for choosing Air France. We wish you a pleasant flight. This is an automatically generated e-mail. Please do not reply.
• how we use the data we collect about you
• the measures we employ to protect your privacy.
You will also find the procedure for limiting the use of your data.
It has also used the subject line of “Your Air France boarding documents on 3Aug”
The attachment was SHA256 c1c7e9d31033442f9baf34802a238575f2a8acf820f887dcba102413139c2c5d
And also SHA256 f03a64d0a9715ad366e110e72ec3efb7ed268bf4f76a0512025d02aa74da09da