The BBB spam run is back today, with a malicious payload on combiplease.com (174.140.165.194), pretty much the same pattern as yesterday and earlier in the week.
This example is from this morning:
Date: Fri, 9 Dec 2011 09:39:28 +0200
From: “risk@bbb.org” [alerts@bbb.org]
Subject: Re: Case # 48783457
Attachments: main_logo.jpgAttn: Owner/Manager
The Better Business Bureau has got the above-referenced complaint from one of your associates in respect of their business relations with you.
The detailed information about the consumer’s concern is contained in enclosed file.
Please give attention to this question and inform us about your standpoint.
Please click here to reply this complaint.We look forward to your prompt response.
Yours faithfully,
Anita Emil
Better Business BureauCouncil of Better Business Bureaus
4200 Wilson Blvd, Suite 800
Arlington, VA 22203-1838
Phone: 1 (703) 276.0100
Fax: 1 (703) 525.8277
Blocking 174.140.165.194 may be a good idea as other malicious domains may crop up on the same IP address.
Leave a reply