Subject: [found threat a variant of Win32/Injector.Autoit.FCL trojan] Fwd: Payment swift related to PI 1
From: Nanda Shin <[email-masked]>
Date: Thu, 20 Feb 2020 04:22:41 +0000

Dear Sir,

Please kindly note that we have Transferred payment to your Designated
bank As advised by your customer our partner

Kindly see attached covering letter with Bank Swift for follow up with
your bank.

Attached also specification Of payment breakdown as we are third party
payment

Please kindly confirm the attached swift

Regards

Accounts Department

__________ ESET Mail Security __________

Threats were found in this email:

  MT103_INV_DOC.arj - a variant of Win32/Injector.Autoit.FCL trojan - deleted
   MT103_INV_DOC.arj > ZIP > MT103_INV1_DOC.exe - a variant of Win32/Injector.Autoit.FCL trojan - deleted
    MT103_INV_DOC.arj > ZIP > MT103_INV1_DOC.exe > AUTOIT > script.bin - a variant of Win32/Injector.Autoit.FCL trojan - deleted

Detection engine version: 20869 (20200219)

https://www.eset.com