Early 2014 malware and spam campaign claiming to be from Evernote

[gbarry 2,656]

In late January 2014, someone began using variations of our brand to distribute malware and spam. Their messages appear to come from senders like “Evernote Service”, “Evernote Cloud”, and “Evernote Share”, and have subjects like “Image has been corrupted” and “Image has been sent”. Some link to pharmaceutical websites, some link to malware distribution networks that may install malicious software on your computer.

Evernote did not send these emails.



This sender of these emails does not have access to our user lists, and is not targeting Evernote users specifically or exclusively. Evernote is one of many of the companies the sender is impersonating, and we’ve seen nearly identical messages with only the Evernote name exchanged for that of a different company.

If you receive a message like this, please delete it.

 

[Karemela 0]

I've been receiving emails requiring me to verify my Evernote account. I'm to click on a link in the email. Is it valid?

[southernforge 58]

Have you ever received email from a valid service you're subscribed to, that asks you to verify your account with that service?