From: email@example.com [mailto:firstname.lastname@example.org] On Behalf Of LinkedIn PasswordThe malicious payload is at [donotclick]eziponoma.ru:8080/forum/links/column.php which is hosted on:
Sent: 25 January 2013 04:12
Subject: UPS Tracking Number H0931698016
You can use UPS Services to:
Schedule a Pickup
Open a UPS Services Account
Welcome to UPS .com Customer Services
DEAR CLIENT , RECIPIENT'S ADDRESS IS WRONG
PLEASE PRINT OUT THE INVOICE COPY ATTACHED AND COLLECT THE PACKAGE AT OUR DEPARTMENT.
With Respect , Your UPS Customer Services.
Copyright 2011 United Parcel Service of America, Inc. UNITED STATES POSTAL SERVICES, the Your USPS TEAM brandmark, and the color brown are trademarks of United Parcel Service of America, Inc. All rights reserved.
Please do not reply directly to this e-mail. USPS CUSTOMER SERVICES will not receive any reply message. For questions or comments, visit Contact UPS.
This communication contains proprietary information and may be confidential. If you are not the intended recipient, the reading, copying, disclosure or other use of the contents of this e-mail is strictly prohibited and you are instructed to please delete this e-mail immediately.
126.96.36.199 (OVH, France)
188.8.131.52 (PS Internet Company, Kazakhstan)
184.108.40.206 (Railcom, Mongolia)