Yet more BBB themed malware spam this morning, bouncing through a couple of hacked servers to a malicious payload on curcandle.net (174.136.1.223, Colo4Dallas). Blocking access to the IP will also block any other evil domains on the same server.
The payload is on curcandle.net/main.php?page=111d937ec38dd17e although right at the moment it is 404ing. However, the spam run is just 30 minutes old so perhaps it is still under construction.
Some samples:
Date: Wed, 21 Dec 2011 09:55:02 +0100
From: “Better Business Bureau” [[email protected]]
Subject: BBB information regarding your customer’s complaint
Attachments: betterbb_logo.jpgGood afternoon,
Here with the Better Business Bureau informs you that we have been sent a complaint (ID 54715375) from one of your customers with respect to their dealership with you.
Please open the COMPLAINT REPORT below to obtain the details on this matter and inform us about your opinion as soon as possible.
We are looking forward to your prompt reply.
Sincerely,
Rebecca Wilcox
Dispute Counselor
Better Business BureauCouncil of Better Business Bureaus
4200 Wilson Blvd, Suite 800
Arlington, VA 22203-1838
Phone: 1 (703) 276.0100
Fax: 1 (703) 525.8277
============
Date: Wed, 21 Dec 2011 09:54:50 +0100
From: “BBB” [[email protected]]
Subject: Your customer complained to BBB
Attachments: betterbb_logo.jpgAttn: Owner/Manager
Here with the Better Business Bureau notifies you that we have been sent a complaint (ID 44513446) from one of your customers with respect to their dealership with you.
Please open the COMPLAINT REPORT below to obtain more information on this question and inform us about your opinion as soon as possible.
We are looking forward to hearing from you.
Regards,
Theresa Morris
Dispute Counselor
Better Business BureauCouncil of Better Business Bureaus
4200 Wilson Blvd, Suite 800
Arlington, VA 22203-1838
Phone: 1 (703) 276.0100
Fax: 1 (703) 525.8277
============
Date: Wed, 21 Dec 2011 08:54:38 +0000
From: “BBB” [[email protected]]
Subject: Better Business Bureau complaint
Attachments: betterbb_logo.jpgAttention: Owner/Manager
Here with the Better Business Bureau would like to notify you that we have received a complaint (ID 10822005) from one of your customers related to their dealership with you.
Please open the COMPLAINT REPORT below to obtain more information on this question and inform us about your position as soon as possible.
We are looking forward to your prompt reply.
Kind regards,
Theresa Morris
Dispute Counselor
Better Business BureauCouncil of Better Business Bureaus
4200 Wilson Blvd, Suite 800
Arlington, VA 22203-1838
Phone: 1 (703) 276.0100
Fax: 1 (703) 525.8277
============
Date: Wed, 21 Dec 2011 09:33:03 +0000
From: “BBB” [[email protected]]
Subject: BBB complaint report
Attachments: betterbb_logo.jpgAttn: Owner/Manager
Here with the Better Business Bureau notifies you that we have been sent a complaint (ID 10942308) from one of your customers in regard to their dealership with you.
Please open the COMPLAINT REPORT below to obtain more information on this question and let us know of your position as soon as possible.
We hope to hear from you very soon.
Faithfully,
Arnold Melendez
Dispute Counselor
Better Business BureauCouncil of Better Business Bureaus
4200 Wilson Blvd, Suite 800
Arlington, VA 22203-1838
Phone: 1 (703) 276.0100
Fax: 1 (703) 525.8277
Leave a reply
i got that message and whoever it is called my house. I am on the do not call list.
Jessie