Date: Fri, 7 Dec 2012 10:53:57 +0200
From: Badoo [[email protected]]
Subject: You have been sent a file (Filename: [victimname]-64.pdf)
Sendspace File Delivery Notification:
You’ve got a file called [victimname]-792244.pdf, (337.19 KB) waiting to be downloaded at sendspace.(It was sent by CHASSIDY PROCTOR).
You can use the following link to retrieve your file:
The file may be available for a limited time only.
sendspace – The best free file sharing service.
Please do not reply to this email. This auto-mailbox is not monitored and you will not receive a response.
The malicious payload is at [donotclick]pelamutrika.ru:8080/forum/links/column.php hosted on the following familiar IP addresses which you should definitely try to block:
18.104.22.168 (GNet, Mongolia)
22.214.171.124 (Psychz Networks, US)
Leave a reply