‘You Have Received a 4 Page Fax’ Malware Email

This email, which claims to have been sent by cloud-based fax service eFax Corporate, advises you that you have received a 4-page fax. The message suggests that you click a link to read your fax using your PDF reader.

The email includes a fax reference number and caller ID. It also features the eFax Corporate logo.

However, the email has no connection to eFax Corporate and the link does not open a fax message.

Instead, the link opens a compromised website that harbours malware. Once downloaded and installed, this malware may allow criminals to connect to your computer and use it for their own purposes. The malware may download other types of malware and harvest personal information from the infected computer.

Rather bizarrely, some versions of the malware emails use a spoofed Australian Taxation Office (ATO) email address. Of course, the emails have no connection whatsoever to the ATO.

Variants of these eFax Corporate malware emails have been distributed since at least 2012. Similar malware messages falsely claim to be from other online fax services such as RapidFax and RingCentral.