If you receive an email with the subject line: “Action Required: You have received a document for your review/approval (Document Flow Manager),” be cautious. You have most likely received a malicious email sent by cybercriminals.
According to Hoax Slayer, the fake messages appear to come from a billing provider or service and state something like this:
"This message is intended for the intended recipient only and may contain privileged, private or other personal information. If you have received this in error, please notify the sender immediately and delete the original. Any other use of this message is prohibited."
Given that the amount mentioned in the announcement is close to $10,000 (€7,000), many users may rush to open the attachment. This is a big mistake because the file attached to the emails hides a piece of malware.
Variants of this email have been circulating since at least February 2013, when Cisco issued a warning. It appears the campaign is still active.
