SophosLabs intercepts a wave of malicious emails luring unsuspecting internet users into clicking on a malicious attachment. The emails all claim to be related to a rejected wire transfer. The subject lines used in the malicious spam campaign can vary, but are all related to Wire Transfer Confirmation (some give a reference number in an attempt to make the message appear more official). Attachment is a file called Wire_AMBA01-Rejected.htm, which Sophos products detect asrejected.”]
Source: https://grahamcluley.com/blackhole-malware-attack-poses-as-rejected-wire-transfer-email/