These fake Facebook messages lead to malware on chicleart.net:
Date: Thu, 3 May 2012 11:57:48 -0300
From: “Facebook” [[email protected]]
Subject: Most recent events on Facebook
Hi xxxxxxxxxx,
You have blocked your Facebook account. You can reactivate your account whenever you wish by logging into Facebook using your old login email address and password. Subsequently you will be able to use the site as before.
Thanks and regards,
The Facebook Team
Sign in to Facebook and start connecting
Sign infollow the link below :
http://www.facebook.com/home.php
This message was sent to [email protected]. If you don’t want to receive these emails from Facebook in the future, please click: unsubscribe.
Facebook, Inc. Attention: Department 415 P.O Box 10005 Palo Alto CA 94303==================
Date: Thu, 3 May 2012 15:53:38 +0100
From: “Facebook” [[email protected]]
Subject: New comment on your status update
Hi xxxxxxxxxx,
You have blocked your Facebook account. You can resume your account at any time by logging into Facebook with your old login email address and password. You will then be able to use the site as before.
Thanks and regards,
The Facebook Team
Sign in to Facebook and start connecting
Sign infollow the link below :
http://www.facebook.com/home.php
This message was sent to [email protected]. If you don’t want to receive these emails from Facebook in the future, please click: unsubscribe.
Facebook, Inc. Attention: Department 415 P.O Box 10005 Palo Alto CA 94303==================
Date: Thu, 3 May 2012 14:09:11 +0000
From: “Facebook” [[email protected]]
Subject: New comment on your status update
Hi xxxxxxxxxx,
You have deactivated your Facebook account. You can reactivate your account whenever you wish by logging into Facebook using your old login email address and password. Subsequently you will be able to use the site in the same way as before.
Best regards,
The Facebook Team
Sign in to Facebook and start connecting
Sign infollow the link below :
http://www.facebook.com/home.php
This message was sent to [email protected]. If you don’t want to receive these emails from Facebook in the future, please click: unsubscribe.
Facebook, Inc. Attention: Department 415 P.O Box 10005 Palo Alto CA 94303
The malicious payload is on chicleart.net/main.php?page=8decfe38488713cc on 37.59.68.23 hosted by OVH in the UK.
Leave a reply
