Scammers pretend to be friendly office printers

[InfoSec News <alerts () infosecnews org>]

http://www.computerworld.com/s/article/9220315/Scammers_pretend_to_be_friendly_office_printers

By Jeremy Kirk
IDG News Service
September 27, 2011

Hackers have found a new hook to trick people into opening malicious 
attachments: send emails that purport to come from office printers, many 
of which now have the ability to email scanned documents.

"This is a new tactic we haven't really seen before," said Paul Wood, 
senior intelligence analyst for Symantec.cloud, the company's Web-based 
security and email branch.

The emails invariably contain some kind of Trojan downloader, which can 
be used to download other malware or steal documents from the computer.

Symantec published examples of the emails collected recently in its 
latest monthly Symantec Intelligence Report, released on Tuesday. The 
emails at first glance look quite convincing, with a subject line "Fwd: 
Scan from a HP Officejet." The email reads "Attached document was 
scanned and sent to you using a Hewlett-Packard HP Officejet 05701J" and 
then "Sent by Morton."

[...]


_____________________________________________________________
FINAL CALL to register #HITB2011KUL - Asia's premier
deep-knowledge network security event now in it's 9th year!
http://conference.hitb.org/hitbsecconf2011kul/