This pharmacy spam comes with a .VCF attachment to try to bypass spam filters and common sense. In case you didn't know, a .VCF file is a vCard contact file that can be imported into your email application.
From: Leticia Boyer M. D.
Date: 24 June 2014 10:25
Subject: I'm your new family physician
Hello, my name is Leticia Boyer, M. D., and I'm your new family physician.
I want to recommend you online pharmacy with great amount of medicine and 70% discount.
I haven't believed till I checked it by myself. I'm sending you my vCard,
so you are able to find more info about me as well as link of mentioned pharmacy.
The attachment is
Leticia_Boyer_MD.vcf although probably it will change from spam-to-spam. The contents of this particular .vcf file are:
BEGIN:VCARD
VERSION;TYPE=WORK:3.0
FN:Leticia Boyer
N:Leticia Boyer;;;;
PROFILE:VCARD
ADR:;;He goes on to explain his pimping experience gave him the ability to get into new businesses.;NY;NY;28006;USA
EMAIL:[redacted]b90d3@pol.ir
ORG:TopPharmacy
URL:http://[redacted].doctorydvu.ru/?1113E36D0FED4E75BD169B5698E88
NOTE:The station was located to the south of Raglan street and between Evans street and Station street.
END:VCARD
The link in the email
isn't malicious as it is just a fake pill site.. but it could be. This is a fairly novel approach at spamming though (I first saw it a
couple of days ago) and it could well trick people into adding a contact.. although whether or not they would be daft enough to believe that this "new physician" would really be recommending a pharmacy with a Russian domain name remains to be seen.
1 comment:
Just got one.
From a Canadian Domain
I did not and WILL NOT open the VCF. Who knows how it may be evolving.
Note that the "return" address included my name.
*****************
From: Angelica Morin M. D. [mailto:aaa505@bell.ca]
Sent: Tuesday, June 24, 2014 7:38 AM
To: aaa@aaa.aaa
Subject: Let me introduce myself
Hello, my name is Angelica Morin, M. D., and I'm your new family physician.
I want to recommend you online pharmacy with great amount of medicine and 70% discount.
I haven't believed till I checked it by myself. I'm sending you my vCard,
so you are able to find more info about me as well as link of mentioned pharmacy.
****************
Post a Comment