Subject: [found threat a variant of Win32/GenKryptik.ERSG trojan] Fwd: Make_a_payment 20 AUG 2020 進成
From: "[email-masked]" <[email-masked]>
To: undisclosed-recipients:undisclosed-recipients:
Date: Fri, 04 Sep 2020 00:29:29 +0000

Dear Sirs,

Good Morning,

Kindly refer to attached our payment advise for below invoices payment, 
please confirm Safe received of our remittance on urgent basis-

6-02 2020/05/08 USD25,000.00(C.No.089209) LONG OUTSTANDING
7-02 2020/05/08 USD25,000.00(C.No.079318) LONG OUTSTANDING
1-01 2020/06/01 USD23,000.00(C.No.099612)

And kindly provide us the below invoice –

151-02 2020/08/20 USD23,000.00 MAETIGA(C.No.099630)We will clear the 
invoice soonest.

Thanks and Best Regards

Mar Lar

Senior Executive Accounts

__________ ESET Mail Security __________

Threats were found in this email:

  swift-554-pdf.rar - a variant of Win32/GenKryptik.ERSG trojan - deleted
   swift-554-pdf.rar > RAR5 > swift-554-pdf.exe - a variant of Win32/GenKryptik.ERSG trojan - deleted

Detection engine version: 21932 (20200903)

https://www.eset.com