Here’s a terse spam, leading to a malicious payload on cpredret.ru/main.php
From: [email protected]
Date: 13 December 2011 04:20
Subject: I’m shocked!
Have you seen how much money has Cameron spent on his new movie?
What a graphics, check out the trailer!
Apparently, it refers to James Cameron and not David Cameron. Payload site is hosted on 79.137.237.67 which is the now infamous Digital Network JSC in Russia (aka DINETHOSTING). Blocking 79.137.224.0/20 would be good for your health.
Leave a reply
