The Latest in IT Security

A fake LinkedIn spam leading to malware hosted at closteage.com:

Date:      Wed, 21 Mar 2012 16:24:04 +0200
From:      “Stacy Goss”
Subject:      LinkedIn Invitation from your colleague

LinkedIn
REMINDERS

Invitation notifications:
? From Kadeem Ruiz (Your Colleague)

PENDING MESSAGES

? There are a total of 3 messages awaiting your response. Visit your InBox now.

Don’t want to receive email notifications? Adjust your message settings.

LinkedIn values your privacy. At no time has LinkedIn made your email address available to any other LinkedIn user without your permission. S 2010, LinkedIn Corporation.

The payload is at closteage.com/showthread.php?t=73a07bcb51f4be71 (report here) hosted on 209.59.217.101 (Endurance International, US). Blocking that IP will block any other malicious sites on the same server.