From: firstname.lastname@example.orgAttached is a file payment Slip (2).html which displays a popup alert:
Date: 24 October 2014 13:50
this mail is to inform you that the payment have been made
see the attached file for the payment slip
You have been signed out of this account this may have happened automatically cause the attachement needs authentication. to continue using this account, you will need to sign in again. this is done to protect your account and to ensure the privacy of your informationThe victim then gets send to a phishing page, in this case at uere.bplaced.net/blasted/tozaiboeki.webmail.html which looks like this..