Bogus Scan from HP ScanJet Printer Leads to Malware-Serving Russian Site

Cybercriminals are using the old email from the printer scam in an attempt to lure unsuspecting internauts to a malware-serving website called anapoli.ru.

The site hosts a malicious JavaScript which attempts to push malware via security holes in Adobe products and Windows’ Help Center, Conrad Longmore reports on Dynamoo’s Blog.

Here’s what these fake emails – titled Scan from a Hewlett-Packard ScanJet - look like, so you’ll know what to avoid:

Attached document was scanned and sent to you using a Hewlett-Packard HP 90027P.

SENT BY : SAVANNAH
PAGES : 1
FILETYPE: .HTML [Internet Explorer File]

The attached file, HP_scanDoc.htm is the one that loads anapoli.ru. We would like to remind both users and IT staffers that these types of emails can cause a lot of damage to an enterprise network if they’re not handled properly.