Sophos notes that there was a malware campaign with the subject “Statement of fees 2008/09″.
It consists of three sentences that are separated into three different paragraphs. The first statement tells the reader that there is an attachment of a statement of fees that the reader requested. The second sentence notes that the sender passed the user’s request to another section.
The attachment was detected as Mal/EncPk-ES. Richard Cohen who is the author of the blog entry about this issue notes that users should not open the attachment if they did not order anything that is related to the email such as tickets or a package.
Source: Sophos

Articles
Blogs
Kits
Forums