Scan from a Xerox WorkCentre Pro – Virus

In another crafty attempt to induce email recipients to voluntarily infect their own computers with a virus the latest campaign spoofs a scanned document email purportedly from a Xerox WorkCentre Pro multi-tasking machine.

The emails arrive from an endless variety of spoofed email From address senders, when they are actually sent from personal computers that have already been infected by this campaign.

The Subject lines of the emails are consistently:

Subject:      Scan from a Xerox WorkCentre Pro N 5458581
Subject:      Scan from a Xerox WorkCentre Pro $4181035

In order to attempt to evade spam filtering systems, the very last part of the Subject line is a completely random number, so that no two emails will look exactly alike.

The body of the messages says:

Please open the attached document. It was scanned and sent to you using a Xerox WorkCentre Pro.

Sent by: Guest
Number of Images: 1
Attachment File Type: ZIP [DOC]

WorkCentre Pro Location: machine location not set
Device Name: XRX3050AA7ACDB45167448

For more information on Xerox products and solutions, please visit

The “Device Name” in the message is also completely randomized to prevent exact matches by spam filters.

The attachment payload of the email will be a Zip file, an  EXE file, or both and often also includes randomized numbers such as:

  • Xerox_doc.exe

Executing the attachment (which is most definitely not a scanned document) launches the infection of the recipient’s computer, adding it to the spammer’s growing bot-net army of spam spewing zombies.

- -

OnlyMyEmail is an award winning hosted spam filtering service and business email hosting provider. Our enterprise cloud computing anti-spam solution, the MX-Defender, has the highest capture rate of any spam filter ever tested in the VBSpam Challenge, blocking a record setting 99.9993% of all malicious and junk email.

Our Personal spam filtering system is also a Software as a Service (SaaS) solution and has won both the PC World "World Class Award" and also the PC Magazine "Editor's Choice Award."

OME-Kids is a webmail solution that protects children from spam and other harmful emails. OME-Kids offers unique Parental Controls that allow you to choose the level of security and oversight that's right for your child.

Tags: , , , ,

Comments are closed.