This "End of Aug. Statement" spam uses the same malicious payload as
this one earlier today.
From: Margo Lawrence [mailto:robbersab@alumni.insead.edu]
Sent: 04 April 2012 14:17
Subject: Re: FW: End of Aug. Statement
,
as reqeusted I give you inovices issued to you per february (Internet Explorer format).
Regards
Dollie Mcguire
There's an HTML-in-ZIP attachment, leading to a malicious payload at dhjhgfkjsldkjdj.ru (report
here). Blocking access to the IP addresses shown in
this post may be prudent.
No comments:
Post a Comment