Hackers have found a new hook to trick people into opening malicious attachments: send emails that purport to come from office printers, many of which now have the ability to email scanned documents.
The emails invariably contain some kind of Trojan downloader, which can be used to download other malware or steal documents from the computer.
Symantec published examples of the emails collected recently in its latest monthly Symantec Intelligence Report. The emails at first glance look quite convincing, with a subject line "Fwd: Scan from a HP Officejet." The email reads "Attached document was scanned and sent to you using a Hewlett-Packard HP Officejet 05701J" and then "Sent by Morton."
lucy24
6:55 pm on Sep 28, 2011 (gmt 0)
Raise your hand if you ... oh, never mind.
Fwd eh? Some e-mail users sort everything marked "Fwd" straight into the Junk Mail bin.
johnhh
11:29 pm on Sep 28, 2011 (gmt 0)
Unless you don't have an HP - gets loads of these every day - along with "End of Aug. Statmeent" ones and all the ones with Fwd and re: and Fw: and "ACH transactions" no idea what a ACH transaction is ...
sem4u
8:59 am on Sep 29, 2011 (gmt 0)
I had an "ACH Transaction" email the other day. I didn't know what it was either. Turns out to be "Automated Clearing House"...nothing that I would get involved with on a day to day basis.