Toll Road Bill Phishing Scam

A faithful reader passes this Toll Road Bill Phishing attempt. The actual text of the attached invoice was blocked by the spam filter, but not the message itself.

On 9/3/15, 9:23 AM, "E-ZPass Support" <tim.skinner@webx136.aruba.it> wrote:

Notice to Appear,

You have a unpaid bill for using toll road.

You are kindly asked to pay your debt as soon as possible.

You can find the invoice is in the attachment.

Regards,

Tim Skinner,

E-ZPass Agent.

The Invoice was replaced with this:

FILE QUARANTINED

Microsoft Forefront Protection for Exchange Server removed a file since it was found to match a filter. File name: "Invoice_0000308435.zip.txt" Filter name: "FILE FILTER= .zip.txt: *.zip.txt"