Date: Wed, 20 Jun 2012 05:20:45 +0100
Subject: Urgent information from BBB
Here with the Better Business Bureau notifies you that we have received a complaint (ID 615337145)
from one of your customers with respect to their dealership with you.
Please open the COMPLAINT REPORT below to obtain more information on this matter and let us know of your point of view as soon as possible.
We are looking forward to your prompt reply.
The malicious payload is at [donotclick]sushfpappsbf.ru:8080/forum/showthread.php?page=5fa58bce769e5c2c (report here) which is multihomed on the following IPs:
18.104.22.168 (Delta Telecom, Azerbaijan)
22.214.171.124 (Reliance Communications, India)
126.96.36.199 (Psychz Networks, US)
188.8.131.52 (Netia SA, Poland)
The following IPs and domain names are connected with this malware run and should be blocked if you can: