This fake UPS spam leads to malware on panalki.ru: Date: Fri, 17 Aug 2012 06:50:08 -0400 From: “Global Express” [[email protected]] Subject: Re: FW: End of Aug. Stat. Required Attachments: Invoices-26-2012.htm Hallo, as reqeusted I give you inovices issued to you per july. Regards The malicious payload is at [donotclick]panalki.ru:8080/forum/showthread.php?page=5fa58bce769e5c2c (report here) […]
More fake printer spam, this time leading to malware on anapoli.ru: Date: Thu, 16 Aug 2012 12:20:25 +0500 From: Mariah Gunn via LinkedIn [[email protected]] Subject: Fwd: Scan from a Hewlett-Packard ScanJet #88682504 Attachments: HP_scanDoc.htm Attached document was scanned and sent to you using a Hewlett-Packard HP 90027P. SENT BY : SAVANNAH […]
There’s not much to the recurring “Your Photos” spam apart from some terse text and a link. In this case the spam leads to a malicious payload at [donotclick]pussyriotss.ru:8080/forum/showthread.php?page=5fa58bce769e5c2c (report here). pussyriotss.ru? Well, if you follow the news in Russia at all then you will have heard of the Pussy Riot case. The IP addresses […]
Latest Comments