Re: Fake Xerox Message | 07-17-2013

[Bob Bayn <bob.bayn () USU EDU>]

On this subject, does anyone have a listing of the default subject lines for the various vendors of multi-function 
appliances that send scan-to-email messages?

I have:
Scanned Image from a Xerox WorkCentre
Scanned image from MX-               (Sharp)
Scanned image from AR-                (Sharp)
Scanned document from HP ePrint user
Attached Image                                (Canon)
Scan from a HP OfficeJet

I'm trying to configure our Ironports to insert a warning into any message with a default subject line.


Bob Bayn    SER 301    (435)797-2396       IT Security Team
Office of Information Technology,     Utah State University
     three common hazardous email scams to watch out for:
     1) unfamiliar transaction report from familiar business
     2) attachment with no explanation in message body
     3) "phishing" for your email password
________________________________
From: The EDUCAUSE Security Constituent Group Listserv [SECURITY () LISTSERV EDUCAUSE EDU] on behalf of Robert Meyers 
[remeyers () MAIL WVU EDU]
Sent: Wednesday, July 17, 2013 10:13 AM
To: SECURITY () LISTSERV EDUCAUSE EDU
Subject: Re: [SECURITY] Fake Xerox Message | 07-17-2013

We saw a wave of these months ago, but it appears to be cresting again lately.





Robert E. Meyers,  Ms.Ed.
Manager, Security Awareness
  Information Security Services
West Virginia University
office: (304) 293-8502
remeyers () mail wvu edu


> > > On Wednesday, July 17, 2013 at 10:53 AM, "Thorpe, Glenn" <Glenn.Thorpe () UNTSYSTEM EDU> wrote:
Anyone else get hit by this attack this morning?  We got it pretty good.

http://techhelplist.com/index.php/spam-list/97-scanned-image-from-a-xerox-workcentre
At the time we started seeing it it wasn't being detected, but now the AV's are catching up.



Glenn Thorpe III
Asst. Director, Information Security
University of North Texas System
T: 940.369.8884
E: glenn.thorpe () untsystem edu<mailto:glenn.thorpe () untsystem edu>
[cid:GTPNUJBZLYJU.IMAGE.png]