Invoice for [Your Website Page Title]
You may receive this email, or one similar:
From: HQ <[email protected]> on behalf of HQ <[email protected]>
Sent: 22 February 2018 07:47
To: Accounts Team
Subject: invoice
Invoice for Company Cloud Computing Solutions for Businesses
|
|
|
|
|
|
|
|
Oddly, they seem to be using MailChimp as their transport - not sure how that happened as MailChimp are very strict about these matters.
Now the download link for the invoice points to: https://sangamhotel.com/Invoice%20for%20company.zip which downloads a zip file.
The file is called 'invoice for company' and is a JS Javascript file.
This file is dangerous and should not be opened.
This email should be reported as spam to mailchimp and possibly even to the CIA
We have also seen this same email with the files stored at:
https://nasirakabdayak.com/Scanned FAX.zip
And the subscription links to be:
https://nixonhire.us6.list-manage.com/unsubscribe
We are also seeing these as arriving from the company name: Nixon Hire, as below:
In the email above the site has already been disabled and so the logo is no longer working...
HTML is below:
|
|
|
|
|
Copyright © 2018 Nixon Hire, All rights reserved.
You are receiving this email because you have previously opted in to receive emails from Nixon Hire.
Our mailing address is:
Nixon Hire
City West Business Park
Scotswood Road
Newcastle Upon Tyne, NE4 7DF
United Kingdom
Add us to your address book
Want to change how you receive these emails?
You can update your preferences or unsubscribe from this list.
|
|
|
|
Once again the subscription points to mailchimp:
https://nixonhire.us6.list-manage.com/profile?u=49ab97c4aa&id=1a1758171e&e=270c72add7
https://nixonhire.us6.list-manage.com/unsubscribe?u=49ab97c4aa&id=1a1758171e&e=270c72add7&c=e43f84ff25