X.W32/Heuristic_Eldorado

Subject: Your Keys for Recovery

Attachment: New_Keys.zip

AVs: 8/36 (22.23%) An, Au, eS, F-P, Mc, Se, So, The

Body:

Dear Holder

Nitez

We are sending you the keys for your account recovery.

Please, save them and keep in a reliable place.

Thanks for using our service.

Isaac Rosa

X.W32/Banker.DWDR

Subject: You have recieved an eCard

Attachment: ecard.zip

AVs: 5/36 (13.89%) Av, Bi, GD, Nor, So

Body:

Good day.

You have received an eCard

To pick up your eCard open attached file

We hope you enjoy you eCard.

Thank You!

X.Virus.HIDDENEXT/Worm.st_tran

Subject: Your Statement between 1/1/08 and 10/30/08

Attachment: Statment_08.zip

AVs: 8/36 (22.23%) An, Au, eS, F-P, Mc, Se, So, The

Body:

Good morning (recipient)

As you requested, we are sending you this report with details on your account transactions made between 1/1/08 and 10/30/08.

Please print out page 2 of the report copy attached this e-mail.

Always ready to answer your questions,

Jenny Hinkle

X.Trojan.Crypt.XPACK.ec

Subject: You have received an eCard

Attachment: Card.zip

AVs: 10/36 (27.78%) An, eS, Ik, Mc, Pa, Se, So, Su, Tr, VB

Body:

Good day.

You have received an eCard

To pick up your eCard, open attached file

We hope you enjoy you eCard.

Thank You!

X.Mal/EncPk-CZ

Subject: Account Operations Report

Attachment: Statement_details.zip

AVs: 6/36 (16.67%) Cl, Ka, Mi, NO, So, Tr

Body:

Good morning

(recipient)

We got the request for the detailed report on your account operationsmade in the period from 1/1/08 to 10/30/08Please print out altered details of your account on page 3 is enclosed in the zip compressed attachment to this message.

Thanks for contacting us.

Abigail Odom

X.Troj/Invo-Zip.etk

Subject: New Ticket #66574(varies)
Attachment: 332_Ticket.zip
AVs: 3/36 (8.34%) MC, So,The

Body:

Hello,
We are glad you are decided to use the new service of our site - “Get your Aero ticket On-line”

You have just created your personal account:

Your login:
Your password: dessFMVI
The balance of your charge card – is $515.16.Every time you are buying the Aero ticket on our site you are granted a rebate of 15%!

There is an purchase Invoice and your flight ticket added to this letter.
Open ZIP arhive and you can print your ticket and set out on your journey!

Best wishes,
Eleanor Thomas
Delta Air Lines

X.Trojan.Win32.Agent.ak

Subject: Your Statement between 1/1/08 and 10/30/08

Attachment: Statement_2008.zip

AVs: 11/35 (31.43%) An, AV, Cl, Dr, eS, Ik, Ka, Se, So, Sy, Tr

Body:

Good morning

Timed

As you requested, we are sending you this report with details on your account transactions made between 1/1/08 and 10/30/08.Please print out page 2 of the report copy attached this e-mail.

Always ready to answer your questions,

Alphonso Kilgore

X.Virus.HIDDENEXT/Worm.tikt

Subject: New Ticket #(varies)
Attachment: #332_Ticket.zip
AVs: 9/36 (25.00%) An, Au, F-P, F-S, Mc, Se, The, Tr


Body:

Hello,
We are glad you are decided to use the new service of our site - “Get your Aero ticket On-line”

You have just created your personal account:Your login: silver20gsterling@ci.santa-maria.ca.us
Your password: dessJU4W

The balance of your charge card – is $546.72.Every time you are buying the Aero ticket on our site you are granted a rebate of 15%!
There is an purchase Invoice and your airplane ticket added to this letter. Open ZIP arhive (PASSWORD is ticket) and you can print your ticket and set out on your journey!

Best wishes,
Tracie Roth
Delta Air Lines

X.TrojanUPSpy:Win32/Zbot

Subject: Tracking N 5570872680

Attachment: UPSINVOICE_88087.zip

AVs: 1/36 (2.78%) Mi

Body:

Sorry, we were not able to deliver postal package you sent on October the 19th in timebecause the recipient’s address is not correct.Please print out the invoice copy attached and collect the package at our office.If you do not receive package in ten days you will have to pay 6$ per day.

Your UPS

X.Virus.HIDDENEXT/Worm.DET

Subject: Your Statement number: 306390(varies)

Attachment: Details.zip

AVs: 9/34 (26.48%) An, Au, eS, F-P, Mc, Mi, Se, So, The

Body:

Dear Client

As you requested, we are sending you this report with details on your account transactions made between 9/1/2008 and 10/28/2008.

Untill we meet again

Rhonda Sanderson

X.Trojan.Zbot_tr.num

Subject: Tracking N 7085994644(number differs)
Attachment: UPSinvoice77179.zip
AVs: 8/36 (22.22%) Au, Av, Cl, F-P, Ik, Mi, Nod, So

Body:

Sorry, we were not able to deliver postal package you sent on October the 19th in timebecause the recipient’s address is not correct.Please print out the invoice copy attached and collect the package at our office.If you do not receive package in ten days you will have to pay 6$ per day.

Your UPS

X.Trojan-Spy:W32/Zbot.upsn

Subject: Tracking N 0648768031
Attachment: UPSInvoice_fi85551.doc.zip
AVs: 8/36 (22.23%) An, Au, Av, F-P, F-S, Se, So, The

Body:

Sorry, we were not able to deliver postal package you sent on October the 19th in timebecause the recipient’s address is not correct.Please print out the invoice copy attached and collect the package at our office.If you do not receive package in ten days you will have to pay 6$ per day.

Your UPS

X.Trojan.Win32.Pakes.lin

Subject: (username) Tracking

Attachment: Tracking_s10.08.zip

AVs: 17/36 (47.22%)An, Au, AV, BI, Cl, F-P, F-S, GD, Ik, Ka, Mc, No, Se, So, Sy

Body:

Hi Vupann,

The package was sent today on your address. As you requested we are sending you your package tracking numbers in the attached ZIP archive, in the Word document.We care each our client.

Client Support Service

Fanny

X.Trojan.Fakealert.pass

Subject: Speed up your computer, Your PC may be a ROCKET!, Power up your computer now

Attachments: Power.zip

AVs: 5/36 (13.89%) Au, Cl, F-S, Ka

Body:

To open - type "power"

X.Trojan.Win32.Pakes.lio

Subject: (Recipient) Instruction on Recovery
Attachment: Account_instruction.zip
AVs: 13/36 (36.11%) An, Au, AV, F-P, F-S, Fo, Ik, Ka, Mc, Se, So, Sy, The

Body:

Hello, (Recipeint)

Your account was temporarily blocked. Here is an instruction on recovery of your account.Yours faithfully
Clients Department
Brad

X.Troj/Invo-Zip.poste

Subject: La Poste colis postal

Attachment: poste.doc.zip

AVs: 6/34 (17.65%) An, Au, F-P, Se, So, The

Body:

Chers clients,

malheureusement, nous avons manque de livrer le pli (votre colis postal), que vous avez envoyé le 1er septembre,parce que l’adresse du Destinataire n’existe pas.S'il vous plait, imprimez la facture envoyee en fichier joint a ce message, et venez chercher le plia notre office a l’adresse indiquee a la facture.

Consultant Angelia Riley,

La Poste

X.W32/Heuristic-300.reprt

Subject: (username) Stat.Jan_Oct.

Attachment: Report.1_10.zip

AVs: 13/36 (36.11%) An, Au, Bi, Dr, F-P, F-S, GD, Ik, Mc, Pa, Se, So,The

Body:

Dear Client,

You wanted us to send you the report with some details on the transactions of your account that were made from 1/1/2008 to 10/1/2008

Always ready to answer your questions,

Carey

X.W32/Malware_OC_germn

Subject: Lastschrift

Attachment: Anhang.zip

AVs: 5/34 (14.71%) An, Au, F-P, Mc, Se

Body:

Sehr geehrte Damen und Herren,

Usenet GmbH - usenext.de

65,28 EUR

Beate Uhse GmbH beate-uhse.de

86,52 EUR

bisherige Mahnkosten unserer Mandanten:

85,41 EUR

vorgerichtliche Inkassogebuehren:

14,45 EUR

noch offener Gesamtbetrag inklusive unserer Bearbeitungskosten:

825,81 EUR

bislang ist der von uns angemahnte Betrag nicht ausgeglichen worden!

Als Vertragspartner der SCHUFA Holding AG weisen wir darauf hin, dass wir Daten ueber aussergerichtliche und gerichtliche Einziehungsmassnahmen bei ueberfaelligen und unbestrittenen Forderungen an die SCHUFA Holding AG, Kormoranweg 5, 65201 Wiesbaden, uebermitteln. Vertragspartner der SCHUFA sind vor allem Kreditinstigute sowie Kreditkarten- und Leasinggesellschaften.Moechten Sie diese Schritte vermeiden, zahlen Sie bitte bis zum 09.12.2008 Ihren Schuldbetrag unter Angabe Ihres Aktenzeichens (siehe Anhang) auf die in der Auflistung genannte Bankverbindung.Die detailierte Auflistung Ihrer Rechnungen, Mahngebuehren und die Zahlungs bzw. Wiederspruchshinweise finden Sie im Anhang.

Mit freundlichen Gruessen Ihr Proinkasso Team

Dieser Brief wurde maschinell erstellt und ist deshalb ohne Unterschrift gueltig

X.Win32:Oliga

Subject: Re [2]: ITs me :)
Attachment: DC12.zip
AVs: 3/36 (8.34%) ava, gd, mca



Hello, enquiries.

Thursday, October 23, 2008, 09:53:54 AM, you wrote:

> Hi
> I love you with all my heart and soul.
> I miss you so much.
> I send you my photo. Please do not show it to your family and friends.
> Many kisses, Your Love.

HI!
Super nice crazy f... foto :)

Call me: 70869231

--
Best regards,
gonzalez mailto:gonzalez@ (name and email vary - matches spoofed sender)

X.Win32/Emold.gen!C

Subject: Data request, Attached Statement, Statement January - October, Account data
Attachment: Report_January-October.zip
AVs: 10/36 (27.78%) ant, aut, esa, fp, mca, mic, sec, sop, the, tre


Please check the file added to this message. There is the requested report in it.
The details have been successfully changed today.

Glad to help you any time
Tech-support
Billie (name varies - matches sender)

X.W32/troj.rprt.23

Subject: (recipient's name) Report.Jan_Oct.
Attachment: Report.1_10.zip
AVs: 2/36 (5.56%) mca, the



Dear Customer

We got the request for the detailed report on your account operations
made in the period from 1/1/2008 to 10/1/2008

Always ready to help you
Adrienne (name varies - matches sender)

X.W32/Heuristic300_wrldpay

Subject: WorldPay CARD transaction Confirmation
Attachment:WorldPay_Card_Transaction_Confirmation_OrderNo76644.doc.zip (61KB)
AVs: 7/36 (19.45%) An, Au, F-P, Mc, Mi, Se, So

Body:
Thank you!

Your transaction has been processed by WorldPay, on behalf of Academic Resources Center Inc.

The invoice file is attached to this message.
This is not a tax receipt.
We processed your payment.
Academic Resources Center Inc has received your order, and will inform you about delivery.
Sincerely,
The AcaDemon Team
Enquiries

This confirmation only indicates that your transaction has been processed successfully. It does not indicate that your order has been accepted. It is the responsibility of Academic Resources Center Inc to confirm that your order has been accepted, and to deliver any goods or services you have ordered.

If you have any questions about your order, please email Academic Resources Center Inc at: followup@acade9UWmicresourcescenter.com, with the transaction details listed above.

X.W32/Mal/EncPk-CZ

Subject: WorldPay CARD transaction Confirmation
Attachment: WorldPay_CARD_Transaction_Confirmation_OrderNo76621.doc.zip
AVs: 8/36 (22.22%) ant, aut, fp, mca, mic, sec, sop, sym

Thank you!

Your transaction has been processed by WorldPay, on behalf of Academic Resources Center Inc.

The invoice file is attached to this message.
This is not a tax receipt.
We processed your payment.
Academic Resources Center Inc has received your order,
and will inform you about delivery.
Sincerely,
The AcaDemon Team

Enquiries

This confirmation only indicates that your transaction has been processed successfully. It does not indicate that your order has been accepted. It is the responsibility of Academic Resources Center Inc to confirm that your order has been accepted, and to deliver any goods or services you have ordered.

If you have any questions about your order, please email Academic Resources Center Inc at: followup@acadeF9Fmicresourcescenter.com, with the transaction details listed above.

Thank you for shopping with Academic Resources Center Inc.

X.W32/troj.rprt.22.B

Subject: Account data, Data request, Attached Statement, Statement January - October
Attachment: Report_January-October.zip
AVs: 2/36 (5.56%) mca, the


Please check the file added to this message. There is the requested report in it.
The details have been successfully changed today.

Glad to help you any time
Tech-support


Fern (name varies-matches sender)

X.W32/troj.rprt.22

Subject: (recipient name) Report.Jan_Oct.
Attachment: Report.1_10.zip
AVs: 2/36 (5.56%) mca, the

Dear Customer

We got the request for the detailed report on your account operations
made in the period from 1/1/2008 to 10/1/2008

Always ready to help you
Adolfo (name varies - matches sender)

X.W32/troj.10/21St

Subject: Account information, Attached Statement, Data request, Statement January - October
Attachment: Statement.Jan,Oct.zip
AVs: 2/36 (5.56%) mca, the



Please find the document attached to this message. The report was issued today. Requested account details have been altered successfully.

Thank you for contacting us.

Respectfully,
Anderson (name varies- matches sender)

X.W32/Heuristic.1_10

Subject: (Recipient) Report.Jan_Oct.

Attachment: Statement.1_10.zip

AVs: 14/36 (38.89%) An, Au, Cl, eS, F-P, Mc, Mi, NO, Pa, Pr, Se, So, The, Tr

Body:

Dear client,

You asked to send you the detailed report on all operations of your account made during the period from 1/1/2008 to 10/1/2008.

The report is in the ZIP-compressed MS Word file attached to this message.

Please, contact us any time you need help,

Cathleen

X.W32.troj.acct.D

Subject: Account data, Account information, Statement January - October, Statement January - October, Data request
Attachment: Statement_January-October.zip
AVs: 2/34 (5.89%) mca, the



Please find the document attached to this message. The report was issued today. Requested account details have been altered successfully.

Thank you for contacting us.

Respectfully,
Rolando (name varies - matches sender)

X.W32/Heuristic-10_20

Subject: (recipient name)Report Jan-Oct.

Attachment: Statement1-10

AVs: 10/35 (28.57%) An, Au, eS, F-P, Mc, Mi, Se, So, The, Tr

Body:

Dear Customer,

As you requested, we are sending you this report with details on your account transactions made between 1/1/2008 and 10/1/2008.

At your service,

Dominick

X.Win32/AutoRun.sTate

Subject: Account data, Attached Statement, Data Requested, Account Information

Attachment: Statement_January-October.zip

AVs: 14/36 (38.89%) An, Au, AV, eS, F-P, IK, Ka, Mc, NO, Se, So, Sy, The, VB

Body:

Please find the document attached to this message. The report was issued today. Requested account details have been altered successfully.

Thank you for contacting us.

Respectfully,

Elise

X.Win32/Cutwail.gen!B

Subject: (recipient's name) Report 1/1/2008 - 10/1/2008
Attachment: Statement_01-10.zip
AVs: 10/36(27.78%) ant, aut, es, fp, mca, mic, sec, sop, the, tre



Dear Valued Customer:

Your account ID: (recipient's name)

As requested, we are sending you this account report attached this mail between 1/1/2008 and 10/1/2008.

At your service,
Allyson Gallegos (name varies - matches sender)

X.Trojan.Virantix.C

Subject: New anjelina jolie sex scandal
Attachment: anjelina_video.zip
AVs: 3/36 (8.34%) kas, mca, sop



anjelina jolie porn video, file attached, watch it

X.W32/Malware.ix

Subject: Statement January - October, Account data, Data request, Attached Statement, Account information
Attachment: Statement_JAN-OCT.zip
AVs: 2/36 (5.56%) mca, the


Please take a look at the attached statement on your account. The statement was issued today upon request, and your data has been successfully altered.

Thank you for contacting us.

Sincerely,
Dorthy (name varies - matches sender)

X.W32/Heuristic-300.legis

Subject: Legislation

Attachment: Legislation.zip

AVs: 9/36 (25.00%) An, Au, eS, F-P, Mc, Se, So, The, Tr

Body:

Hullo

New clauses have been added to the legislation regulating your online activities; some of the operations are now considered illegal. The new law has come into force as of 25.09.2008; the penalties have been toughened.

Please read the new document and be more accurate further on.

Come back soon

X.W32/Heuristic-300.legis

X.W32/troj.Etix

Subject: Your Online Flight Ticket N 05401 (number varies)
Attachment: E-ticket.zip
AVs: 1/36 (2.78%) the

Dear customers,
Thank you for using our new service "Buy airplane ticket Online" on our website.
Your account has been created:

Your login: (recipient's email address)
Your password: PASSLAPZ

Your credit card has been charged for $968.86.
We would like to remind you that whenever you order tickets on our website you get a discount of 10%!
Attached to this message is the purchase Invoice and the airplane ticket.
To use your ticket, simply print it on a color printed, and you are set to take off for the journey!

Kind regards, (greeting varies)
Northwest Airlines (airline varies)

X.Win32/Emold.gen!C

Subject: Credit Card Fraud Involving, Fraud Transactions, Your the Account Statement, Security Department, Information of Your Transactions, Dear Holder, Fraud Defense
Attachment: report.zip
AVs: 3/36 (8.34%) mca, sop, the


Dear Credit Card Holder:

The last transaction report on your credit card shows a number
of transactions that have questionable background.
That gives us reasons to believe that your credit card details
have been stolen, and your card has been abused for making
unauthorized payments.

Enclosed is the listing of transactions made with your credit card
between 01.10.2008 and 13.10.2008. Please look through
the enclosed document carefully and pay special attention to
the last three of the listed transactions – they are the ones that
we suspect to be fraudulent.

Please find time to review the enclosed account statement and
confirm the transactions you have authorized in person.
This would help us both to have this issue resolved as quickly as possible.

The Word-formatted copy of your transaction list is enclosed in
the ZIP-compressed attachment to this message.


Respectfully (closing varies)
Audra Brown (name varies, matches sender)
Manager of Credit Card Security

X.W32/troj.docGEN

Subject: Translate Document $150, Please Translate Document ASAP, Get the result ASAP Please
Attachment: document.zip
AVs: 2/36(5.56%) mac, the

Good evening (greeting varies)

I need this document translated, and the translation is to be of high quality.
The attorney asked me to be especially careful with page 2. As I need to
submit the document tomorrow, please have it checked and translated for me today.

I have deposited $150 to your credit card account that you gave me the last time.
Let me know if any questions occur.

P.S. The document is in the ZIP-compressed MS Word file attached to this message.
I look forward to getting the result ASAP.

See you soon (closing varies)
Jon Addison (name varies - matches sender)

X.W32/Zbot.fees.08_09

Subject: Statement of fees 2008/09

Attachment: Fees_2008_2009.zip

AVs: 8/34 (23.53%) An, Au, AV, F-P, Pa, Se, So, The

Body:

Please find attached a statement of fees as requested, this will beposted today.

The accommodation is dealt with by another section and I have passedyour request on to them today.

Kind regards.

Genevieve

X.Win32/Emold.e-tix

Subject: Your Online Flight Ticket N 69019

Attachment: e-Ticket_N32XXX.zip

AVs: 12/36 (33.33%) An, Au, eS, F-P, Ik, Mi, Pa, Pr, Se, So, The, Tr

Body:

Good day,

Thank you for using our new service "Buy flight ticket Online" on our website.Your account has been created:

Your login: stephcdd@tic.chYour password: PASSKGXB

Your credit card has been charged for $964.96.We would like to remind you that whenever you order tickets on our website you get a discount of 10%!Attached to this message is the purchase Invoice and the flight ticket.To use your ticket, simply print it on a color printed, and you are set to take off for the journey!

Kind regards,

Spirit Airlines

X.W32/Generic.zip_statem

Subject:Dear Holder, Fraud Defense, Security Department, Information of Your Transactions, Credit Card Fraud Involving, Your the Account Statement

Attachment: Statement.zip

AVs: 9/36 (25.00%) An, Au,eS, F-P, Mc, Se, So, The, Vb

Body:

Greating and felications

Dear Valued Customer,

We have reasons to believe that your credit card has been involved in a number of fraudulent transactions we have spotted recently. Enclosed is the account statement with the list of transactions made with your credit card between 01.09.2008 and 03.09.2008. Please look carefully through the enclosed document; the last three of the listed transactions are the ones that we suspect to be fraudulent.

I would appreciate if you could find time to clarify this issue and confirm the transactions that you have made personally. This would help us both to have this issue resolved as quickly as possible.

Please find the Word-formatted copy of your account statement is enclosed in the archive attached to this message.

Goodbye

Morgan Bloom

Manager of Credit Card Fraud Defense

X.Trojan.Spy.Goldun.NDU

Subject: Angelina Jolie Free Video
Attachment: video.zip
AVs: 2/36 (5.56%) bit, gd


Body:

New sex scandal, Angelina Jolie porn watch in attached file

X.Troj/Invo-Zip.fraud

Subject: Dear Holder, Fraurd Defense, Security Department, Credit Card Fraud Involving

Attachment: Statement.zip

Avs: 11/36 (30.56%) An, Au, eS, F-P, Mc, Mi, Pa,Se,So, The, Tr

HalloDear Valued Customer,

We have reasons to believe that your credit card has been involved in a number of fraudulent transactions we have spotted recently. Enclosed is the account statement with the list of transactions made with your credit card between 01.09.2008 and 03.09.2008. Please look carefully through the enclosed document; the last three of the listed transactions are the ones that we suspect to be fraudulent.

I would appreciate if you could find time to clarify this issue and confirm the transactions that you have made personally. This would help us both to have this issue resolved as quickly as possible.

Please find the Word-formatted copy of your account statement is enclosed in the archive attached to this message.

Adios

Aurelia Medina

Manager of Credit Card Fraud Defense

X.troj.passprotect.09

Subject: Your bill mcclrhosyn(random letters)

Attachment: bill09.zip

AVs: 3/36 (8.34%) eS, F-S, Ka

Body:

The bill is attached. Password 123.

X.Generic Malware.a!zip

Subject: Fraud Transactions, Information of Your Transactions, Dear Holder, Fraud Defense, Security Department, Credit Card Fraud Involving
Attachment: statement.zip
AVs: 2/36 (5.56%) mca, the


Hello (greeting varies)
Dear Credit Card Holder:

Please be aware that a credit card fraud involving your credit card
has been registered by our security department. For your information,
we are sending you the account statement that includes all transactions
made with your credit card from 01.09.2008 through 03.09.2008.
Please take a note of the last three transactions on the list,
which have been recognized as fraudulent.

We highly recommend you to inform us of the transactions you have
made personally. Thus, you will help us and yourself to resolve this issue
as soon as possible.

An MS Word document containing your account statement in is enclosed
in the archive attached to this message.

Best regards (closing varies)
Morton Atkins (name varies, matches 'from' field)
Manager of Credit Card Fraud Defense

X.W32.trojan.unknown1

Subject: Exclusive photos, you'll be happy

Attachment: P****.zip

AVs: 0/36

Hello, man.

Watch my sweety p****!

Thanks.

X.Passprotected-08

Subject: New Bill for rubio.

Attachment: bill08.zip

AVs: 3/36 (8.34%) F-s, Ka, Sy

Body:

Hello (recipient), the new bill is attached. Password is 123. Please pay in time.

X.Troj.Password-protec.bil

Subject: New Bill for zenzkaty.

Attachment: bill7.zip

AVs: 2/36 (8.33%) F-s, Ka

Body:

Hello (name of recipient) , the new bill is attached. Password is 123. Please pay in time.

X.W32\sriz.bl3

Subject: New Bill for (recipient name)
Attachment: bill03.zip
AVs: 3/36 (8.33%) fs, kas,



Hello (recipient name), the new bill is attached. Password is 12345. Please pay.

X.Troj/Agent-HUV.lg

Subject: Some Illegal Operations

Attachment: Legislation.zip

AVs: 10/35 (28.57%) An, Au, eS, f-p, Mi, Pa, Se, So, Th, Tr

Good afternoon

New clauses have been added to the legislation regulating your online activities; some of the operations are now considered illegal. The new law has come into force as of 25.09.2008; the penalties have been toughened.

Please read the new document and be more accurate further on.

Remember me to your wife

X.W32/troj.sriz.bl

Subject: New Bill for (recipient name)
Attachment: Bill02.zip
AVs: 3/36 (8.33%) fs, kas,


Hello (recipient name), the new bill is attached. Password is 12345. Please pay in time.