No surprise, VirusTotal reports a trojan in 'New Order.xlsx': #tree . ├── [Content_Types].xml ├── docProps │   ├── app.xml │   └── core.xml ├── _rels ├── tree.txt └── xl     ├── drawings     │   └── vmlDrawing1.vml              <--WORM DOWNLOADER (https://nvd.nist.gov/vuln/detail/CVE-2017-11882)     ├── printerSettings     │   └── printerSettings1.bin     ├── _rels     │   └── workbook.xml.rels     ├── sharedStrings.xml                <--TROJAN (trojan.byron.3 for most positive hits)     ├── styles.xml     ├── theme     │   └── theme1.xml     ├── workbook.xml     └── worksheets         ├── _rels         │   └── sheet1.xml.rels         ├── sheet1.xml         ├── sheet2.xml         └── sheet3.xml 9 directories, 15 files There is a lot of Chinese in the XML files, some may be innocuous; I don't speak or read Chinese, but what little I could get Google to translate did not seem too bad. On 12/1/20 9:40 AM, larrystotler@netscape.net wrote:

Can somebody please remove this scammer from the mailing list????

-----Original Message----- From: Mahmoud HSBC <info@kansan.com> To: opensuse-ppc@opensuse.org Sent: Mon, Nov 30, 2020 1:24 pm Subject: [opensuse-ppc] Swift-Print View

**------------------ Instance Type and Transmission ----------------------** **Notification (Transmission) of Original sent to SWIFT (ACK)** **Network Delivery Status** : Network ACK **Priority/Delivery** : Normal **Message Input Reference** : 1738 200206KTEFTRISAXXX7698251842

**----------------------- Message Header ------------------------------ ---** *Swift INPUT FIN 103 Single Customer Credt Transfer* *Sender * : KTEFTRISXXX KUVEYT TURK KATILIM BANKASI A.S.

ISTANBUL TR

*Receiver* : CCFRFRPPXXX HSBC FRANCE (FORMERLY HSBC CCF)

PARIS FR

*----------------------- User Header ------------------------------ -----* *108:* *- User Reference Number* : 14833737

**----------------------- Message Text ------------------------------ ----** **20** : **Sender's Reference**

122008643

**23** B : **Bank Operation Code**

CRED

**32** A : **Value Date/Currency/Interbank Settled Amount**

Date : 24 sep 2020 Currency : EUR (EURO) Amount : #1.250,40#

**33** B : **Currency/Instructed Amount**

Currency : EUR (EURO) Amount : #50.250,40#

**50** F : **Ordering Customer**

/TR110020500000785608100102 1/DEMIRTAS GERI DONUSUM VE 1/PLASTIK SANAYI TICARET LIMITED 2/DERI OSB MAH. MAH. SAMA CAD. 3/TR/ISTANBUL

**57** A : **Account With Institution**

HBUKGB4BXXX HSBC BANK PLC (RFB) LONDON GB

**59** : **Beneficiary Customer**

/GB74HBUK40127673120004 VANDEN RECYCLING LTD MARLBOROUGH HOUSE 30 VICTORIA STREET BELFAST NORTH

**71** A : **DetailsOfCharges**

SHA

**71** F : **SendersCharges**

Currency : EUR (EURO) Amount : #00,00#

**----------------------- Message Trailer ------------------------------** {MAC:00000000} {CHK:1AB7827717B5} **------------------------ Interventions ------------------------------ -** **Category** : Network Report **Creation Time** : 27/11/2020 17:38:00 **Application** : SWIFT Interface **Operator** : SAA **Text** :

{1:F21KTEFTRISAXXX7698251842}{ 4:{177:2002061738}{451:0}{108: 14833737}}

<https://www.kuveytturk.com.tr/subesiz-bankacilik/senin-bankan> ------------------------------------------------------------------------ Bu e-posta ve ekleri kişi ya da kuruma özeldir ve yasal olarak gizlilik gerektirebilir. Eğer mesajın gönderilmek istendiği alıcı siz değilseniz bu mesajın herhangi bir parçasını iletme, kopyalama, dağıtma, açıklama, saklama veya kullanma hakkına sahip olamazsınız. Bu mesajı bir hata sonucu aldıysanız lütfen mesajı ve sisteminizdeki tüm kopyalarını siliniz ve gönderene derhal bildiriniz. Bu mesajin zamanında, virüssüz veya hatasız gönderilmesi garanti edilmemektedir. Gönderen, meydana gelebilecek hatalardan veya eksikliklerden dolayı sorumluluk kabul etmemektedir. This e-mail and included attachments are confidential and may also be legally privileged. You may not forward, copy, distribute, disclose, retain or use any part of it, if you are not the intended addressee. If you have received this correspondence in error, please delete it and all copies of it from your system and notify the sender immediately. The delivery of this message cannot be guaranteed to be timely secure, error or virus-free. The sender does not accept liability for any errors or omissions that may occur. _______________________________________________ openSUSE PPC mailing list -- ppc@lists.opensuse.org <mailto:ppc@lists.opensuse.org> To unsubscribe, email ppc-leave@lists.opensuse.org <mailto:ppc-leave@lists.opensuse.org> List Netiquette: https://en.opensuse.org/openSUSE:Mailing_list_netiquette List Archives: https://lists.opensuse.org/archives/list/ppc@lists.opensuse.org

_______________________________________________ openSUSE PPC mailing list -- ppc@lists.opensuse.org To unsubscribe, email ppc-leave@lists.opensuse.org List Netiquette: https://en.opensuse.org/openSUSE:Mailing_list_netiquette List Archives: https://lists.opensuse.org/archives/list/ppc@lists.opensuse.org