This fake LinkedIn spam appears to lead to a malicious payload on 74.91.112.248:
Date: Wed, 13 Jun 2012 14:58:15 +0200
From: “LinkedIn©” [[email protected]]
Subject: Express LinkedIn Mail
REMINDERSInvitation reminders:
• From kristen redshaw (Country General Manager at Toshiba)PENDING MESSAGES
• There are a total of 3 messages awaiting your response. Visit your InBox now.
Don’t want to receive email notifications? Adjust your message settings.
LinkedIn values your privacy. At no time has LinkedIn made your email address available to any other LinkedIn user without your permission. © 2012, LinkedIn Corporation.
The malicious payload is on [donotclick]74.91.112.248/page.php?p=88fe38de which is hosted on Nuclear Fallout Enterprises in the US.
Leave a reply
