More BBB spam, this time attempting to deliver users to a malicious payload on blumtam.com. A couple of samples:
Date: Tue, 20 Dec 2011 00:34:38 -0800
From: “BBB” [alerts@bbb.org]
Subject: Re: your customer�s complaint ID 82235322
Attachments: betterbb_logo.jpgAttention: Owner/Manager
Here with the Better Business Bureau would like to inform you that we have been sent a complaint (ID 82235322) from a customer of yours in regard to their dealership with you.
Please open the COMPLAINT REPORT below to obtain the details on this case and let us know of your position as soon as possible.
We hope to hear from you shortly.
Kind regards,
Fernando Grodhaus
Dispute Counselor
Better Business BureauCouncil of Better Business Bureaus
4200 Wilson Blvd, Suite 800
Arlington, VA 22203-1838
Phone: 1 (703) 276.0100
Fax: 1 (703) 525.8277
and
Date: Tue, 20 Dec 2011 11:09:23 +0200
From: “BBB” [alerts@bbb.org]
Subject: BBB case ID 59988329
Attachments: betterbb_logo.jpgHello,
Here with the Better Business Bureau would like to notify you that we have been filed a complaint (ID 59988329) from a customer of yours related to their dealership with you.
Please open the COMPLAINT REPORT below to view more information on this matter and let us know of your opinion as soon as possible.
We are looking forward to hearing from you.
Faithfully,
Theresa Morris
Dispute Counselor
Better Business BureauCouncil of Better Business Bureaus
4200 Wilson Blvd, Suite 800
Arlington, VA 22203-1838
Phone: 1 (703) 276.0100
Fax: 1 (703) 525.8277
Payload is on blumtam.com/main.php?page=69dbd5a1e3ed6ae9 hosted on 78.47.198.36, a Hetzner AG address suballocated to an outfit called QHoster Ltd in Bulgaria. Blocking access to 78.47.198.32/29 would probably be prudent.
Leave a reply
