Sponsored by..

Tuesday, 11 December 2012

Changelog spam / aseniakrol.ru

This spam leads to malware on aseniakrol.ru:

Date:      Tue, 11 Dec 2012 10:46:43 -0300
From:      Tarra Comer via LinkedIn [member@linkedin.com]
Subject:      Re: Your Changelog UPDATED


as promised your changelog - View

I. Easley
The malicious payload is at [donotclick]aseniakrol.ru:8080/forum/links/column.php hosted on a bunch of IPs that have been used for malware before: (GNet, Mongolia) (Secure Netz, Germany) (Secure Netz, Germany)

No comments: