Sponsored by..

Monday, 24 September 2012

BBB Spam / 108.178.59.11

This fake BBB spam leads to malware on 108.178.59.11:


Date:      Mon, 24 Sep 2012 18:39:47 +0530
From:      "BBB Complaint activity report" [B1A41D3F@onlinepcexpert.net]
Subject:      BBB Case #9833204



Dear business owner, we have received a complaint about your company possible involvement in check cashing and Money Order Scam.

You are asked to provide response to this complaint within 7 days.

Failure to provide the necessary information will result in downgrading your Better Business Bureau rating and possible cancellation of your BBB accreditation status.

Complaint ID#9833204

Council of Better Business Bureaus
3033 Wilson Blvd, Suite 600
Arlington, VA 22201
Phone: 1 (703) 276.0100
Fax: 1 (703) 525.8277

==========


Date:      Mon, 24 Sep 2012 08:25:00 -0300
From:      "Better Business Bureau" [792375B2@mbdservices.com]
Subject:      BBB Complaint activity report

Dear business owner, we have received a complaint about your company possible involvement in check cashing and Money Order Scam.

You are asked to provide response to this complaint within 7 days.

Failure to provide the necessary information will result in downgrading your Better Business Bureau rating and possible cancellation of your BBB accreditation status.

Complaint ID#360343

Council of Better Business Bureaus
3033 Wilson Blvd, Suite 600
Arlington, VA 22201
Phone: 1 (703) 276.0100
Fax: 1 (703) 525.8277

The malicious payload is on [donotclick]108.178.59.11/links/anybody_miss-knowing.php (Singlehop, US) which is most likely a Blackhole 2 kit. This IP address has been used in other attacks and should be blocked if you can.


No comments: