Fake Fax or Scan malware spam email
11.10.14
Edit
Fake Fax or Scan malware spam email claims to be from your domain and mentions Google Disk Drive? Implies document can be downloaded from the link.
Link goes to malware download sites.
Subject: You've received a new fax
New fax at SCAN3712392 from EPSON by [your website or domain]
Scan date: Fri, 26 Sep 2014 13:46:12 -0500
Number of pages: 2
Resolution: 400x400 DPI
You can secure download your fax message at:
http://essextwp.org/Documents/document8624-86214.php
(Google Disk Drive is a file hosting service operated by Google, Inc.)
Header Examples:
Spoofs recipient domain or your domain in From headers, random junk in the Envelope headers.
Received: from abts-mh-dynamic-046.31.169.122.airtelbroadband.in [122.169.31.46]
X-Envelope-From: ahjiy @bomacinc.com
From: "Fax" <fax @ [ your domain ] >
Subject: You've received a new fax
Received: from ZTEXABDUW ([200.74.141.50]
X-Envelope-From: tels @ircm.qc.ca
From: "Fax" <fax @ [ your domain ] >
Subject: You've received a new fax
Link goes to malware download sites.
Subject: You've received a new fax
New fax at SCAN3712392 from EPSON by [your website or domain]
Scan date: Fri, 26 Sep 2014 13:46:12 -0500
Number of pages: 2
Resolution: 400x400 DPI
You can secure download your fax message at:
http://essextwp.org/Documents/document8624-86214.php
(Google Disk Drive is a file hosting service operated by Google, Inc.)
Header Examples:
Spoofs recipient domain or your domain in From headers, random junk in the Envelope headers.
Received: from abts-mh-dynamic-046.31.169.122.airtelbroadband.in [122.169.31.46]
X-Envelope-From: ahjiy @bomacinc.com
From: "Fax" <fax @ [ your domain ] >
Subject: You've received a new fax
Received: from ZTEXABDUW ([200.74.141.50]
X-Envelope-From: tels @ircm.qc.ca
From: "Fax" <fax @ [ your domain ] >
Subject: You've received a new fax