The attached file was some small HTML file containing malicious obfuscated javascript.
Just to note that at my workplace 1 user received a similar email, using older email threads to make it look convincing
and a with a single html attachment. 0/55 av's so far 6 hours after submitting.. In case this helps... https://www.virustotal.com/gui/file/8cb4b28d9c452dfa77e8a061791158bb851681550c889e579a0acc4cb0ff2c86 Cheers, Steve Twitter: @sanesecurityhttps://fosstodon.org/@sanesecurity Sanesecurity.com
_______________________________________________ Manage your clamav-users mailing list subscription / unsubscribe: https://lists.clamav.net/mailman/listinfo/clamav-users Help us build a comprehensive ClamAV guide: https://github.com/Cisco-Talos/clamav-documentation https://docs.clamav.net/#mailing-lists-and-chat