More fake NACHA spam leading to malware, this time the malicious payload is at chillechart.com on 96.126.96.123 (Linode, New Jersey). Date: Thu, 25 Jan 2012 10:40:06 +0100 From: “[email protected]” [[email protected]] Subject: Your pending ACH debit transfer Dear Account Holder, This message includes an important notice about the ACH debit transfer sent on […]
Here’s a lazy spam about an “ACH transfer” that appears to come from the BBB, because the spammers have mixed up the campaigns. Date: Wed, 24 Jan 2012 13:31:58 +0100 From: “[email protected]” [[email protected]] Subject: ACH transfer pending Dear Sir or Madam, This message includes a notification about the ACH debit transfer sent […]
Yet another round of fake NACHA spam leading to malware is doing the rounds, this time the payload is on ragsnip.com/main.php?page=111d937ec38dd17e hosted on 207.210.96.226 (Global Net Access LLC, Atlanta). Blocking access to the IP is preferable to the domain as there may be other malicious domains on the same server. An example spam email from […]
Latest Comments