The Latest in IT Security

Another Pizza spam leading to malware:

Date:      Tue, 24 Apr 2012 02:21:42 +0800
From:      “ORSO`s Pizzeria”
Subject:      Re: Fwd: Order confirmation 93278

You’ve just ordered pizza from our site

Pizza Ultimate Cheese Lover’s with extras:
– Ham
– Italian Sausage
– Chicken
– Black Olives
– Green Peppers
– Pineapple
– Easy On Cheese
– Extra Sauce
Pizza Italian Trio with extras:
– Italian Sausage
– Pork
– Chicken
– Diced Tomatoes
– Black Olives
– Easy On Cheese
– Easy On Sauce
Pizza Spicy Sicilian with extras:
– Italian Sausage
– Pork
– Diced Tomatoes
– Onions
– Jalapenos
– Easy On Cheese
– No Sauce
Pizza Meat Lover’s with extras:
– Italian Sausage
– Black Olives
– Black Olives
– Black Olives
– No Cheese
– Easy On Sauce
Pizza Triple Meat Italiano with extras:
– Ham
– Beef
– Black Olives
– No Cheese
– Easy On Sauce
Pizza Ultimate Cheese Lover’s with extras:
– Italian Sausage
– Pepperoni
– Onions
– Onions
– No Cheese
– Easy On Sauce
Drinks
– Carling x 3
– Hancock x 3
– Dr. Pepper x 4
Total Due:    131.51$

If you haven’t made the order and it’s a fraud case, please follow the link and cancel the order.
CANCEL ORDER NOW!

If you don’t do that shortly, the order will be confirmed and delivered to you.

With Respect
ORSO`s Pizzeria

The malware is hosted on 208.117.43.8/showthread.php?t=34c79594e8b8ac0f (report here) hosted by Steadfast Networks in the US. There’s also an attempted download of an executable from electrosa.com/8zvW2XE.exe on 188.40.0.195 (Hetzner, South Africa) although this looks like a legitimate hacked site.