I received one this morning.
I did not recognise the sender.
I deleted it.
If I think these _might_ be genuine, I normally check the routing
information within he mail header. Usually there's some mismatch in
IPs/hostnames/etc..
On 21/04/16 21:10, Ian Park wrote:
> Hi all
>
> I received a suspicious email today, purporting to come from Covance
> (a web search showed Covance to be an apparently genuine organisation
> doing contract clinical research on drug development and animal
> testing). The text of the email was:
>
> "Purchase Order, 11300 / 0002323808, has been Dispatched. Please
> detach and print the attached Purchase Order."
>
> The attachment was a .tgz file containing a 6.2kB javascript file - a
> method of attack which I haven't seen before. Needless to report that
> I didn't attempt to run said javascript file! Has anyone else come
> across this method of attack?
>
> Ian Park
>
--
/But for the sake of some little mouthful of flesh
we deprive a soul of the sun and light,
and of that proportion of life and time
it had been born into the world to enjoy./
Plutarch AD44-120
--
Please post to: Hampshire@???
Web Interface:
https://mailman.lug.org.uk/mailman/listinfo/hampshire
LUG URL:
http://www.hantslug.org.uk
--------------------------------------------------------------
