Posts Tagged ‘malware’

Scan from a Xerox WorkCentre Pro – Virus

Monday, July 19th, 2010

In another crafty attempt to induce email recipients to voluntarily infect their own computers with a virus the latest campaign spoofs a scanned document email purportedly from a Xerox WorkCentre Pro multi-tasking machine.

The emails arrive from an endless variety of spoofed email From address senders, when they are actually sent from personal computers that have already been infected by this campaign.

The Subject lines of the emails are consistently:

Subject:      Scan from a Xerox WorkCentre Pro N 5458581
Subject:      Scan from a Xerox WorkCentre Pro $4181035

In order to attempt to evade spam filtering systems, the very last part of the Subject line is a completely random number, so that no two emails will look exactly alike.

(more…)

Bookmark and Share

Old Fashioned Advice For Avoiding Spam Email

Wednesday, July 14th, 2010

If you really want to avoid unwanted email you should use OnlyMyEmail. We block over 99% without critical false positives.If you don’t respect your online identity, nobody else will and before long your in-box will rot and fall off. At least that’s what our mother told us. She also told us to eat our vegetables that we’d go blind if we forwarded email to ourselves.

We usually take what Mom says with a grain of salt.

However, it is true that if you start with a clean (as in “never been used”) address you can keep your in-box mostly spam free for a long time using basic email address hygiene.

Disclaimer: The tips that follow do not help to avoid dictionary campaigns which is why we say mostly spam free. Choosing a longer and/or more obscure address can help with this and an occasional spam from a dictionary campaign is not a big problem as long as you don’t open it, don’t reply and delete it right away.

Prevent Email Spam

The best way to prevent email spam is to keep your email address out of the hands of spammers. In order to do this you have to take precautions to ensure both safe web surfing and safe emailing. We’re sure your mother already warned you about the ways of the Internet too, but in case she didn’t, this is probably what she would say.

1. Be Modest With Your Email Address

You may think it’s cool to bare your email address in public but it can only lead to trouble. The web is crawling with address collectors (also known as harvesters) that just want to get into your in-box. Given the chance they will grab your address and have their way with it.

Cover your email address in public by using obfuscation. Instead of showing off your entire address at social networking sites just hint at it like this:

  • myaddress AT mydomain DOT com

Anybody that’s worth knowing will understand and you won’t get anywhere near as much attention from undesirables.

If you have a web site of your own you should avoid exposing links to your email address. It is possible to have address links on your site but you have to be careful to hide them from address collectors using a tool like the OnlyMyEmail Encoder.

2. Giving It Away Is Asking For Spam

Promiscuity is dangerous. Everybody wants your email address and most of them have bad intentions. This includes banks, grocery stores, magazines, warranty cards, job applications and especially web sites. They may seem nice but you never know if they’ll spam you or who they’re going to sell the information to.

If you must give an email address to a web site of questionable repute you need protection. Use a disposable email address and cast it aside like a used condom when you’re done.

3. Practice Safe Surfing

Make sure you have up to date anti-virus software with you at all times. You never know when you might need protection. The Internet is full of nasty viruses and malware and current AV software is your best defense against STDs (Sneaky Trojan Downloads).

Lack of money is no excuse. Many anti-virus clinics will provide you with free prophylactic software. Here are a couple of our favorites:

Remember, safe surfing not only protects you, it protects your friends. One virus can infect everyone in your address book. Using prophylactic software also protects you from your friends. Do you really know how careful they are?

4. Be Discrete About Your Partners

If you do engage in email intercourse, don’t let the whole world know who you’ve been emailing with. Learn to use Blind Carbon Copy (Bcc) to make sure you don’t give away your friends’ addresses and encourage your friends to do the same for you.

Do you really want everyone you email with to know about everyone else you email with? Think of your reputation! You’ll feel better knowing that by using Bcc you’re maintaining your privacy and keeping your affairs to yourself.

5. Avoid Strangers With Cheap Pills

Strangers will try to get you to their web sites by enticing you with cheap ED pills, easy diets, cheap watches and porn. Once they get you there they’ll abuse your privacy at best and probably steal your money and infect you with STDs.

It’s much better to ignore offers from strangers entirely and not give them the chance to trick you. Never reply to spam emails and if you can, delete them without opening them.  If you do open them, never click on the links inside.

Your Email Address Is Precious

If you value your privacy you will heed the advice above. Take good care of your address and you will be able to enjoy it for a long time. On the other hand, if you lose your innocence you will never be able to get it back. Your address will become jaded and used; passed from spammer to spammer like a worn out penny. Just another victim of spam.

Bookmark and Share

The results of your email commands – Virus/Malware

Monday, July 12th, 2010

A new variant of the Delivery Status Notification (Failure) – Virus is widely circulating that arrives with a completely random From: sender address and a subject line, such as:

From:     ”wafersf25@resourcemining.com” <wafersf25@resourcemining.com>
Subject:      The results of your email commands

From:     ”hackingj@robe.riotinto.com” <hackingj@robe.riotinto.com>
Subject:      The results of your email commands

From:       “smirnoff9@royal-fiesta.com” <smirnoff9@royal-fiesta.com>
Subject:      The results of your email commands

Regardless of the random and fictitious sender addresses,  the emails are originating from previously infected personal computers from across the globe. A few widely diverse examples include:

(more…)

Bookmark and Share

[WordPress.com] Activate – Phishing Fraud

Friday, July 2nd, 2010

A new spam campaign is circulating that is spoofing “WordPress” blog subscriptions.

Emails most commonly arrive as:

Subject:      [WordPress.com] Activate http://stephen.wordpress.com/
From:     WordPress.com <donotreply@wordpress.com>

Below is a screen shot of an example email:

WordPress Phishing Fraud

WordPress Phishing Fraud

(more…)

Bookmark and Share

You Won The Lottery . . .

Wednesday, April 7th, 2010

money bag. . . or some other big prize. Never mind that you never heard of this particular sweepstakes (lottery, promotional event, giveaway) and don’t remember entering. That’s just a minor detail. What’s important is that YOU WON and we’re going to give you tons of money.

Really? People actually believe that they won a lottery they didn’t enter?

Sadly, yes.

Judging by how often we see this particular form of email fraud there’s no shortage of potential victims. As P.T. Barnum probably didn’t say: There’s a sucker born every minute.

(more…)

Bookmark and Share

What is wrong with you people?!

Thursday, April 1st, 2010

salesmanAccording to a recently published Messaging Anti-Abuse Working Group (MAAWG) survey, “half of email users in North America and Western Europe have opened or accessed spam and large proportions, representing tens of millions, have taken action like clicking on links or opening attachments”. Worse yet, nearly half of those did so on purpose “to unsubscribe, out of curiosity, or out of interest in the products or services being offered.”

We have to wonder if these same people would leave the keys in their cars to find out if there are really car thieves or would by a luxury watch from a guy on a street corner?

Probably not, as they would likely see the inherent danger in the physical world. However, in a world where most financial transactions are handled electronically, inviting strangers into your computer is an equally bad idea. (more…)

Bookmark and Share

International Conference Invitation

Wednesday, March 24th, 2010

conferenceToday we’re going to look at conference invitation fraud. This is not the most common fraud type but it still occurs often enough to deserve mention in our ongoing email fraud series.

Conference invitation fraud goes after your vanity and to a lesser extent your charitable impulses. To fall for this type of fraud you have to believe that your presence would be desired at an international conference on say, racism, or world hunger, or maybe condom use in Africa. Whatever the cause, you are invited to represent your nation or organization at the conference. All you need to do is follow up by contacting the representative listed in the email.

(more…)

Bookmark and Share

Internet Explorer’s Zero Day Vulnerability

Thursday, January 21st, 2010

Recent tech news reports have been buzzing about a new zero-day vulnerability in the Internet Explorer (IE) browser. While this is not strictly a spam or email issue we thought it was worth mentioning because this attack vector can ultimately be used to seize control of exposed machines and turn them into zombies in some spammer’s botnet.

(more…)

Bookmark and Share