2016-10-03 Locky "[Scan] 2016-1003 hh:mm:ss"

2016-10-03 #locky email phishing campaign "[Scan] 2016-1003 hh:mm:ss"

Email:
-----------------------------------------------------------------------------------------------------------
From: "HELEN GURNAL" <helen.gurnal.53@bestbeadretreat.com>
To: [REDACTED]
Subject: [Scan] 2016-1003 16:06:02
Date: Mon, 03 Oct 2016 16:06:02 +0700

--
Sent with Genius Scan for iOS.

Attachment: "2016-1003 16-06-02.xls"
-----------------------------------------------------------------------------------------------------------
- sender varies between emails
- subject is "[Scan] 2016-1003 <hh>:<mm>:<ss>"
- attached file "2016-1003 XX-XX-XX.xls"

This campaign uses the same download files and malware as campaign "Rechnung xxxx-xxxxx" http://pastebin.com/2ytKsAMV