Last Updated: 2011-10-20 03:56:13 UTC
by Johannes Ullrich (Version: 1)
A reader reported receiving the following e-mail (modified to anonymize):
I do not have a printer like this, but it is possible that a multifunction device will send scanned documents as an e-mail in this form. In this case, the links, which I simulated above using a blue underlined font, both lead to a now defunct URL: http://freebooksdfl (dot) info/main.php . The domain is marked as "suspended for spam or abuse" in whois. One of our handlers reports seeing similar e-mail but not being able to capture any of the content on related links so far.