"Scan from a HP OfficeJet" Spam mail leads to malware infection

SophosLabs researchers come across a new spam mail ,pretending to be an email containing a scan from an HP OfficeJet printer.  The precise wording used in the dangerous emails' subject lines, message body and attachment names can vary.


Spam mail:

Subject: Fwd: Re: Scan from a HP Officejet #43384897

Attached document was scanned and sent

to you using a Hewlett-packard HP OfficeJet 81998A.

Sent by: bETTYANN
Images: 0
Attachemnt Type: .HTML[Internet Explorer]
HP OfficeJet Location:--

Researchers intercepted lot of variant of this spam mail that use the different subject and different file name.  Sophos security products detect the attached files as Mal/Iframe-W,  a malicious script inside the HTM file is designed to make your browser visit third-party sites which may contain further malicious and exploit code.