Yet another USPS spam is doing the rounds, this time leading to a malicious payload on 50.116.19.155. Date: Fri, 30 Mar 2012 13:47:28 +0200 From: “Danielle Connor” [[email protected]] Subject: Your USPS shipment postage labels receipt. Acct #: 7112220 Dear client: This is an email confirmation for your order of 2 online shipping […]
From WeAreSpammers: This link goes to malware via baumanmarketing.com (195.78.33.120, Croatia.. most likely a hacked legitimate site) the it goes to billdirect.jiffyinc.com (184.106.64.60, Slicehost UK) until it hits a malware page on 184.82.202.46 (HOSTNOC, US). Originating IP is 111.242.113.138 (HINET, Taiwan). A Wepawet report is available here. — From: Damon Mcneill [email protected] To: [email protected] Date: […]
Latest Comments