Sponsored by..

Monday 3 December 2012

Wire Transfer spam / panamechkis.ru

This fake wire transfer spam leads to malware on panamechkis.ru:

Date:      Mon, 3 Dec 2012 11:34:38 +0330
From:      HarrisonCrumm@mail.com
Subject:      RE: Wire Transfer cancelled

Dear Customers,

Wire transfer was canceled.

Rejected transfer:

FED NUMBER: 1704196955WIRE580676

Transaction Report: View

Federal Reserve Wire Network
The malicious payload is at [donotclick]panamechkis.ru:8080/forum/links/column.php hosted on: (ULNetworks, Korea) (GNet, Mongolia) (MYREN, Malaysia)

Of these, seems to be a new one which should be added to your blocklists.

No comments: