Thanks for bringing spreading the word about these suspicious looking e-mails; this is something we?ve been advising customers on for more than a year now. As you mention, the e-mail mimics a scan-to-e-mail file from a Xerox WorkCentre Pro. It?s important that customers be suspicious of all scan-to-e-mail files that they were not expecting to receive and to pay attention to the ?From? field of these e-mails. The spam e-mail may fill in the ?From? field with a user name to make the e-mail look safe, as opposed to a machine name (i.e. wcp245@xerox.com). I advise all users to only open email attachments that are sent from a reliable, identifiable source. I encourage your readers to check Xerox.com/information-security/news for ongoing tips and advice.
Larry Kovnat, Sr. Manager, Product Security
Researchers from Sophos have intercepted a currently circulating malware campaign, enticing users into downloading and executing malicious file attachments.
The campaign attempts to trick users into thinking that they have received an email from a Xerox WorkCentre Pro photocopier, and has the following filenames attached to it Xerox_Document_08.23_C11125.zip; Xerox_Scan_08.23_K1274.zip.
Spamvertised as:
Please open the attached document. It was scanned and sent to you using a Xerox WorkCentre Pro.Sent by: GuestNumber of Images: 1Attachment File Type: ZIP [DOC]WorkCentre Pro Location: machine location not setDevice Name: [random]
Related posts:
- Spamvertised Uniform traffic tickets and invoices lead to malware
- Spamvertised United Parcel Service notifications lead to malware
- Spamvertised United Parcel Service emails lead to scareware
- Federal Reserve themed emails lead to ZeuS crimeware
- ‘McDonald’s Free Dinner Day’ emails lead to scareware
- Spamvertised bank statements serving scareware
- Spamvertised Post Office Express Mail (USPS) emails lead to malware
- Spamvertised “Reqest Rejected” campaign leads to scareware
- Spamvertised ‘Facebook. Your password has been changed!’ emails lead to malware
Users are advised not to interact with suspicious emails, or spam emails in general.
