From: Sarah Jeffes [firstname.lastname@example.org]
Date: 6 November 2015 at 11:55
Subject: Payment Notification
Please find attached remittance advice for payment to be processed in your account today.
Kind Regards Macarthur Gas Pty Ltd.
Attached is a file Bill Payment_00001081_8.xls which in the samples I have seen is identical to the payload of this other spam run going on today.