A weird spam, leading to a malicious download at clredret.ru/main.php via a random hacked site.
Date: Tue, 9 Jan 2012 08:39:05 +0300
From: victimname@gmail.com
Subject: Re: Our chances to win an action are higher than ever.We discussed it with the administration representatives, and if we confess our non-essential faults to improve their statistics, the key cause will be closed due to the lack of the government interest to the action We have prepared your declaratory text for the court. Please read it carefully and if anything in it dissatisfies you, inform us.
Speech.doc 489kb
With Respect To You
Jeramiah Cohen
As mentioned earlier, clredret.ru is on 46.249.37.22 (Serverius Holdings, Netherlands) and that IP is well worth blocking.
Leave a reply
