The folk trying to benefit from the Boston Marathon explosion with email spam about the event leading to malware and exploit pages, have reached a new low and now turned to the explosion at the fertilizer factory near Waco, Texas.
New subject lines in spam include:
– West Tx Explosion
– Waco Explosion HD
– CAUGHT ON CAMERA: Fertilizer Plant Explosion Near Waco, Texas
The structure of the URLs in the most recent spam is similar to that of the Boston Marathon spam that we reported recently.
hxxp://XXX.XXX.XXX.XXX/news.html
hxxp://XXX.XXX.XXX.XXX/texas.html
The domains in the URLs are IP numbers and the page has a title of: “Hot News:Fertilizer Plant Explosion Near Waco, Texas”.
The exploit pages loaded are still reliably detected by AVG LinkScanner.
Leave a reply
