Another spam run leading to a malicious payload on csredret.ru (as here)
Date: Tue, 13 Dec 2011 10:19:58 +0200
From: “Tomi Mcrae”
Subject: Hi! This is Tomi
Finally I found your e-mail, I?m not sure whether you remember me, we?ve got terribly drunk, I found your pictures on my camera yesterday, remember me? Party14.jpg 487kb
The “pictures” link loads the malicious script, hosted at black hat hosts Digital Network JSC aka DINETHOSTING in Russia. Avoid.
Leave a reply