Re: Fake Xerox Message | 07-17-2013

[Justin Bennett <jbennett () MSJC EDU>]

Here's the few additional subjects we've seen Blocked/Accepted:

Scanned from a Xerox multifunction device
Scanned Image from a HP Digital Device

Justin Bennett

Supervisor of Network Technology
Information Technology
jbennett () msjc edu <mailto:jbennett () msjc edu> 

 

Mt. San Jacinto College
Phone 951-639-5090
http://www.msjc.edu <http://www.msjc.edu/> 

 

d Security Notice: MSJC Information Technology Staff will never ask for
your password. Keep your passwords private to protect yourself and the
security of our network.

 

From: The EDUCAUSE Security Constituent Group Listserv
[mailto:SECURITY () LISTSERV EDUCAUSE EDU] On Behalf Of Bob Bayn
Sent: Wednesday, July 17, 2013 9:24 AM
To: SECURITY () LISTSERV EDUCAUSE EDU
Subject: Re: [SECURITY] Fake Xerox Message | 07-17-2013

 

On this subject, does anyone have a listing of the default subject lines
for the various vendors of multi-function appliances that send
scan-to-email messages?

I have:
Scanned Image from a Xerox WorkCentre    
Scanned image from MX-               (Sharp)
Scanned image from AR-                (Sharp)
Scanned document from HP ePrint user 
Attached Image                                (Canon)
Scan from a HP OfficeJet

I'm trying to configure our Ironports to insert a warning into any
message with a default subject line.

 

Bob Bayn    SER 301    (435)797-2396       IT Security Team
Office of Information Technology,     Utah State University
     three common hazardous email scams to watch out for:
     1) unfamiliar transaction report from familiar business
     2) attachment with no explanation in message body
     3) "phishing" for your email password

________________________________

From: The EDUCAUSE Security Constituent Group Listserv
[SECURITY () LISTSERV EDUCAUSE EDU] on behalf of Robert Meyers
[remeyers () MAIL WVU EDU]
Sent: Wednesday, July 17, 2013 10:13 AM
To: SECURITY () LISTSERV EDUCAUSE EDU
Subject: Re: [SECURITY] Fake Xerox Message | 07-17-2013

We saw a wave of these months ago, but it appears to be cresting again
lately.

 



 

 

Robert E. Meyers,  Ms.Ed.
Manager, Security Awareness
  Information Security Services

West Virginia University
office: (304) 293-8502
remeyers () mail wvu edu



> > > On Wednesday, July 17, 2013 at 10:53 AM, "Thorpe, Glenn" <
Glenn.Thorpe () UNTSYSTEM EDU> wrote:

Anyone else get hit by this attack this morning?  We got it pretty good.

 

http://techhelplist.com/index.php/spam-list/97-scanned-image-from-a-xero
x-workcentre

At the time we started seeing it it wasn't being detected, but now the
AV's are catching up.

 

 

 

Glenn Thorpe III

Asst. Director, Information Security
University of North Texas System
T: 940.369.8884
E: glenn.thorpe () untsystem edu <mailto:glenn.thorpe () untsystem edu>