From: DoNotReply@ikea.comThe intention here is either to drop the Dridex banking trojan or Locky ransomware. If you see an attachment, do not open it. The attachment is currently being analysed.
Date: 24 February 2016 at 09:56
Subject: Thank you for your order!
IKEA UNITED KINGDOM
To print, right click and select print or use keys Ctrl and P.
Thank you for ordering with IKEA Shop Online. Your order is now being processed. Please check your order and contact us as soon as possible if any details are incorrect. IKEA Customer Relations, Kingston Park, Fletton, Peterborough, PE2 9ET. Tel: 0203 645 0015
ParcelforceWe will confirm your delivery date by text,email or telephone within 72 hrs.
8:31am GMTOrder/Invoice date:
Please note that this email does not mean that we have accepted your order and it does not form a binding contract. A contract will be formed between You and IKEA at the time we dispatch your order to you, with the exception of made to order sofas and worktops where order acceptance occurs at the point when we send you our Delivery Advice email.
Third-party analysis confirms that the attachments are broken and will not work in many mail clients. However, if they did the payload would be identical to this.