Subject: [found threat a variant of MSIL/Kryptik.YTT trojan] Confirm proforma for payment
From: "[email-masked]" <[email-masked]>
To: undisclosed-recipients:undisclosed-recipients:
Date: Tue, 24 Nov 2020 04:10:53 +0000

Good morning,

I am trying to contact you, but no answer.

Please find the attached PI which you provided for the last order and 
refer our remark in RED in the invoice.

It is the only reason that the bank did not process to transfer the 
funds.

Kindly send us the revised PI so that we can forward the same to the 
bank.

Thank you

Regards

__________ ESET Mail Security __________

Threats were found in this email:

  TT7742_pdf.rar - a variant of MSIL/Kryptik.YTT trojan - deleted
   TT7742_pdf.rar > RAR5 > TT7742_pdf.exe - a variant of MSIL/Kryptik.YTT trojan - deleted

Detection engine version: 22369 (20201123)

https://www.eset.com