Date: Fri, 6 Apr 2012 08:29:34 +0200
From: “Hewlett-Packard Officejet 70419A” [[email protected]]
Subject: Scan from a Hewlett-Packard ScanJet #02437326
Attached document was scanned and sent
to you using a Hewlett-Packard HP Officejet 45211A.
Sent by: MILLIE
Images : 7
Attachment Type: ZIP [DOC]
Hewlett-Packard Officejet Location: machine location not set
The payload can be found at:
..the IP address can also be found in this attack.
A Wepawet report can be found here. Anti-virus detection is pretty poor at the moment.
The bad guys certainly seem to have found a way to bring more machines into contact with this malware. Take care!
Leave a reply