This spam appears to be from US Airways, but it actually leads to malware on 174.140.171.173.
From: US Airways – Reservations support@myusairways.com
Date: 2 April 2012 15:15
Subject: US Airways online check-in confirmation.
You have to check in from 24 hours and up to 60 minutes before your flight (2 hours if you’re flying abroad). After that, all you need to do is print your boarding pass and proceed to the gate.Confirmation code: 778136
Check-in online: Online reservation details
Flight7557
Departure city and timeWashington, DC (DCA) 10:00PM
Depart date: 4/5/2012
We are committed to protecting your privacy. Your information is kept private and confidential. For information about our privacy policy visit usairways.com.
US Airways, 111 W. Rio Salado Pkwy, Tempe, AZ 85281 , Copyright US Airways , All rights reserved.
The link goes through a couple of legitimate hacked sites and ends up at 174.140.171.173/showthread.php?t=73a07bcb51f4be71 which contains a malicious payload. This IP is hosted by Directspace in the US.
Leave a reply
