Sponsored by..

Tuesday 24 June 2014

doctorydvu.ru pharma spam has a .VCF attachment

This pharmacy spam comes with a .VCF attachment to try to bypass spam filters and common sense. In case you didn't know, a .VCF file is a vCard contact file that can be imported into your email application.
From:     Leticia Boyer M. D.
Date:     24 June 2014 10:25
Subject:     I'm your new family physician

Hello, my name is Leticia Boyer, M. D., and I'm your new family physician.

I want to recommend you online pharmacy with great amount of medicine and 70% discount.
I haven't believed till I checked it by myself. I'm sending you my vCard,
so you are able to find more info about me as well as link of mentioned pharmacy. 

The attachment is Leticia_Boyer_MD.vcf although probably it will change from spam-to-spam. The contents of this particular .vcf file are:

BEGIN:VCARD
VERSION;TYPE=WORK:3.0
FN:Leticia Boyer
N:Leticia Boyer;;;;
PROFILE:VCARD
ADR:;;He goes on to explain his pimping experience gave him the ability to get into new businesses.;NY;NY;28006;USA
EMAIL:[redacted]b90d3@pol.ir
ORG:TopPharmacy
URL:http://[redacted].doctorydvu.ru/?1113E36D0FED4E75BD169B5698E88
NOTE:The station was located to the south of Raglan street and between Evans street and Station street.
END:VCARD
The link in the email isn't malicious as it is just a fake pill site.. but it could be. This is a fairly novel approach at spamming though (I first saw it a couple of days ago) and it could well trick people into adding a contact.. although whether or not they would be daft enough to believe that this "new physician" would really be recommending a pharmacy with a Russian domain name remains to be seen.


1 comment:

Mark Beckstrom said...

Just got one.

From a Canadian Domain

I did not and WILL NOT open the VCF. Who knows how it may be evolving.

Note that the "return" address included my name.

*****************
From: Angelica Morin M. D. [mailto:aaa505@bell.ca]
Sent: Tuesday, June 24, 2014 7:38 AM
To: aaa@aaa.aaa
Subject: Let me introduce myself

Hello, my name is Angelica Morin, M. D., and I'm your new family physician.

I want to recommend you online pharmacy with great amount of medicine and 70% discount.
I haven't believed till I checked it by myself. I'm sending you my vCard,
so you are able to find more info about me as well as link of mentioned pharmacy.

****************