Quite professional and convincing-looking (and sounding) email supposedly from PHS, with an attched virus in a Word Doc. First seen 26/10/15.
Its impact may be mitigated somewhat by it including non-working images.
It purports to come from email@example.com and reads as follows:
Delivery of new PHS document(s)
Due to a temporary issue with delivering your document(s) via your online account, please find the attached in DOC format for your convenience.
We apologize for you being unable to view your accounts and documents online in the usual manner. Please note that, in the interim, we will continue to deliver documents in this manner until the issue is fully resolved.
To ensure that you continue receiving our emails, please add firstname.lastname@example.org to your address book or safe list.
Do not download or open the attachment.