email phishing and virus (CXmail/OleDl-BL)

[rog163]

Anyone else had an increase of spam mail with following virus: CXmail/OleDl-BL (3)

Emails seem to be coming from .gr,.br, .by domains

We have 2 customers that we do the anti virus for, and both have received similar emails with the same virus today, Luckily Sophos has detected it when users have tried to open the word doc and links and stopped it.

email for 1 customer is with another company (in house linux server) and the other customer is with afrihost.

 

[MDKza]

I had 2 mails make it through O365's spam/phishing filters today, I am honestly surprised as they look so obviously not real.

1 was a .com domain and the other was a .nl domain.

 

[rog163]

looking at them they are very obvious, just not for users apparently.

Did the emails you got seem to come from a known customer or sender they know?

 

[MDKza]

Both from domains we've never dealt with.

looking at them they are very obvious, just not for users apparently.

Did the emails you got seem to come from a known customer or sender they know?