I received one this morning.
I did not recognise the sender.
I deleted it.

If I think these _might_ be genuine, I normally check the routing information within he mail header. Usually there's some mismatch in IPs/hostnames/etc..

On 21/04/16 21:10, Ian Park wrote:
Hi all

I received a suspicious email today, purporting to come from Covance (a web search showed Covance to be an apparently genuine organisation doing contract clinical research on drug development and animal testing). The text of the email was:

"Purchase Order, 11300 / 0002323808, has been Dispatched. Please detach and print the attached Purchase Order."

The attachment was a .tgz file containing a 6.2kB javascript file - a method of attack which I haven't seen before. Needless to report that I didn't attempt to run said javascript file! Has anyone else come across this method of attack?

Ian Park



--
/But for the sake of some little mouthful of flesh
we deprive a soul of the sun and light,
and of that proportion of life and time
it had been born into the world to enjoy./
Plutarch AD44-120
-- 
Please post to: Hampshire@mailman.lug.org.uk
Web Interface: https://mailman.lug.org.uk/mailman/listinfo/hampshire
LUG URL: http://www.hantslug.org.uk
--------------------------------------------------------------

Reply via email to