Invoice 08387 from Them Digital – fake PDF malware — 1 Comment

  1. Thanks Derek for your concise description!!

    Basically one of our customers machines was infected which we believed was cleaned. The Invoice in question was emailed to the customer and obviously got intercepted. I have received approx 300k + Non Delivery Reports (NDR) and counting thus far.

    Our emails are hosted so we haven’t got an on premise Exchange server and I have been in conversation with Microsoft regarding the issue. They have also checked our NDR backscatter and DNS settings. Unfortunately because we have been spoofed there is nothing that can be done and I have to ride this out until they stop!

    Again much appreciated!!


Leave a Reply

Your email address will not be published. Required fields are marked *