[Hampshire] Nasty email purporting to come from the US

Top Page

Reply to this message
Author: Ian Park
Date:  
To: hampshire
Subject: [Hampshire] Nasty email purporting to come from the US
Hi all

I received a suspicious email today, purporting to come from Covance (a
web search showed Covance to be an apparently genuine organisation doing
contract clinical research on drug development and animal testing). The
text of the email was:

"Purchase Order, 11300 / 0002323808, has been Dispatched. Please detach
and print the attached Purchase Order."

The attachment was a .tgz file containing a 6.2kB javascript file - a
method of attack which I haven't seen before. Needless to report that I
didn't attempt to run said javascript file! Has anyone else come across
this method of attack?

Ian Park

--
Please post to: Hampshire@???
Web Interface: https://mailman.lug.org.uk/mailman/listinfo/hampshire
LUG URL: http://www.hantslug.org.uk
--------------------------------------------------------------