User feedback received similar e-mail subject, message body itself without any problems, but attachments are virus files with macros, as shown below:
Saved to the desktop, suggesting that the virus file, directly win10 comes with a firewall to delete.
Many users should have received this e-mail, and so quickly to statistics, found that about a dozen people received this e-mail, and then deleted from the mail batch backstage away [Note: The theme "the truth of covid-19" can not be searched, so the theme changed to "the truth"].
Get-TransportService |Get-MessageTrackingLog -MessageSubject 'the truth of covid-19' -Start "2020/04/03 9:00" -EventId receive|select sender,@{n="recipients";e={$_.recipients}},messagesubject,time* |Export-Csv -Path c:\list.csv -NoTypeInformation -Encoding utf8
Get-mailbox -ResultSize unlimited|Search-Mailbox -SearchQuery 'subject:"The Truth" and received:"2020/04/03"' -DeleteContent -Force
Current is removed, this message how we continue to deal with it, we can create rules directly delete, you can put this move to Outlook e-mail spam folder, and modify headers with [virus] words.
