The Latest in IT Security

“Scan from a Hewlett-Packard Officejet” spam /


Another malicious spam, this time with an attachment containing obfuscated code leading to

Date:      Thu, 1 Mar 2012 09:43:50 +0530
From:      [email protected]
Subject:      Fwd: Re: Fwd: Scan from a Hewlett-Packard Officejet #603320
Attachments:     HP_Scan-27-499614.htm

Attached document was scanned and sent

to you using a Hewlett-Packard HP SmartJet 4931F.

Sent by: ARLYNE
Pages : 9
Attachment Type: .HTM [Internet Explorer/Mozilla Firefox]

The malware is on , as with other recent .ru:8080 attacks, this is multihomed on a familiar set of IP addresses: (Steadfast Networks, US) (Colopronto, US) (Corbina Telecom, Russia) (Netia Telekom, Poland) (Optimate-server, Germany) (Websitewelcome, US) (Tata Teleservices, India) (Bharti Infotel, India) (Kwangun University, Korea) (Slicehost, US) (Slicehost, US) (Slicehost, US) (Telemax, Peru) (ECSuite, US) (Century Telecom Ltda, Brazil) (Slicehost, US) (Commission For Science And Technology, Pakistan) (Sejong Telecom, Korea)

A bare list for copy-and-pasting:

Leave a reply


MONDAY, JULY 22, 2019

Mission-Critical Broadband – Why Governments Should Partner with Commercial Operators:
Many governments embrace mobile network operator (MNO) networks as ...

ARA at Scale: How to Choose a Solution That Grows With Your Needs:
Application release automation (ARA) tools enable best practices in...

The Multi-Model Database:
Part of the “new normal” where data and cloud applications are ...



Latest Comments

Social Networks