Fake Fax or Scan malware spam email
11.10.14
Edit
Artikel Terkait
- INV829502L Duplicate Payment Received Attached : malcicious .doc with macro : De_829502L.doc
- Email with a damaged malicious word doc attachment from Accounts Finchley
- Fake Amazon.com order confimation #114-4788259-2304224
- Fake Nazareth House malware spam email claims a paying sheet is attached
- Fake UPS Package Delivery Notification # MHDXFHF691MHDXFHF887 or Invoice malware attached
Fake Fax or Scan malware spam email claims to be from your domain and mentions Google Disk Drive? Implies document can be downloaded from the link.
Link goes to malware download sites.
Subject: You've received a new fax
New fax at SCAN3712392 from EPSON by [your website or domain]
Scan date: Fri, 26 Sep 2014 13:46:12 -0500
Number of pages: 2
Resolution: 400x400 DPI
You can secure download your fax message at:
http://essextwp.org/Documents/document8624-86214.php
(Google Disk Drive is a file hosting service operated by Google, Inc.)
Header Examples:
Spoofs recipient domain or your domain in From headers, random junk in the Envelope headers.
Received: from abts-mh-dynamic-046.31.169.122.airtelbroadband.in [122.169.31.46]
X-Envelope-From: ahjiy @bomacinc.com
From: "Fax" <fax @ [ your domain ] >
Subject: You've received a new fax
Received: from ZTEXABDUW ([200.74.141.50]
X-Envelope-From: tels @ircm.qc.ca
From: "Fax" <fax @ [ your domain ] >
Subject: You've received a new fax
Link goes to malware download sites.
Subject: You've received a new fax
New fax at SCAN3712392 from EPSON by [your website or domain]
Scan date: Fri, 26 Sep 2014 13:46:12 -0500
Number of pages: 2
Resolution: 400x400 DPI
You can secure download your fax message at:
http://essextwp.org/Documents/document8624-86214.php
(Google Disk Drive is a file hosting service operated by Google, Inc.)
Header Examples:
Spoofs recipient domain or your domain in From headers, random junk in the Envelope headers.
Received: from abts-mh-dynamic-046.31.169.122.airtelbroadband.in [122.169.31.46]
X-Envelope-From: ahjiy @bomacinc.com
From: "Fax" <fax @ [ your domain ] >
Subject: You've received a new fax
Received: from ZTEXABDUW ([200.74.141.50]
X-Envelope-From: tels @ircm.qc.ca
From: "Fax" <fax @ [ your domain ] >
Subject: You've received a new fax