EMAIL. DESCRIPTION: Malicious spam (malspam) with link that downloaded a malcious Microsoft Word document (Hancitor). The Hancitor malware document is designed to download and infect Windows hosts with malware. EMAIL HEADERS: Date: Monday, 2017-03-06 as early as 15:37 UTC thru at least 17:18 UTC; From (spoofed): “Delta Air Lines” <DeltaAirLines@t.
Article Link: http://www.malware-traffic-analysis.net/2017/03/06/index2.html