Last revised or Updated on: 14th March, 2016, 11:30 PMAn email with the subject of Incoming Transaction Declined ID: 21287178 [ random numbered] coming from random names and email addresses with a zip attachment is another one from the current bot runs which downloads teslacrypt They use email addresses and subjects that will entice a user to read the email and open the attachment. A very high proportion are being targeted at small and medium size businesses, with the hope of getting a better response than they do from consumers. The email looks like: From: random names & email addresses Date: Mon 14/03/2016 23:19 Subject: Incoming Transaction Declined ID: 21287178 Attachment: confirmation_30816188.zip Body content: Your Purchase Sender’s Details: 21287178Amount: USD123,75ACH Routing / Transit Number: … Continue reading →