Latest batch are quite realistic
We've been getting "Card Receipt" emails from "firstname.lastname@example.org" today, about 40 have arrived so far for several of us. They have a DOC attachment and are not blocked by Kaspersky or ESET. The email looks genuine, even the headers seem OK. A couple of days ago I briefed everyone not to open anything like this as we have been getting inundated by similar emails recently and if they do open it they are to pull their LAN cable immediately and report it.
One of our people was waiting for a receipt from a Tracey and not reading it too closely opened it. Word is set to disable macros so I presume the blank document did nothing. They pulled their power cable and came to see me in a panic.
The past few days have been a right PITA.