This fake Amazon spam leads to malware on
savidae.net:
Sent: 11 July 2012 15:12
Subject: Your Amazon.com order of "GoPro HD Helmet HERO Camcorder - Silver" has shipped!
Hello,
Shipping Confirmation
Order # 111-8744380-4899254
Your estimated delivery date is:
Friday, July 13 2012
Track your package Thank you for shopping with us. We thought you'd like to know that we shipped this portion of your order separately to give you quicker service. You won't be charged any extra shipping fees, and the remainder of your order will follow as soon as those items become available. If you need to return an item from this shipment or manage other orders, please visit Your Orders on Amazon.com.
Shipment Details
GoPro HD Helmet HERO Camcorder - Silver $149.95
Item Subtotal: $149.95
Shipping & Handling: $0.00
Total Before Tax: $149.95
Shipment Total: $149.95
Paid by Visa: $149.95
You have only been charged for the items sent in this shipment. Per our policy, you only pay for items when we ship them to you.
Returns are easy. Visit our .
If you need further assistance with your order, please visit Customer Service.
We hope to see you again soon!
Amazon.com
The message may appear to be sent from your own email address (
this is why). The malicious payload is on
[donotclick]savidae.net/main.php?page=f8475ba078c011af (
report here) hosted on 178.238.130.222 (BurstNet UK, allocated to an individual in Ukraine). These other domains are on the same server, their status is not known.
beingconducts.info
burstingqualcomm.info
cameratoburnergo.info
carpetingpenny.info
clevererreviewed.info
crisisproducer.info
delightsmalwarespywarefree.info
elsedefer.info
enotatepreview.info
expostypes.info
insigniamake.info
meetscellsafety.info
methodicaldiskinternals.info
needingshirts.info
overwhelminglymustdownload.info
premisepreliminary.info
relinquishingpin.info
restoreculled.info
ringtonererender.info
shiftvirtues.info
smartmedialaserlike.info
taxcasterbolstered.info
tubez11.cu.cc
wearguitarlike.info
woodantispy.info
xxxxlivechat.info
UPDATE:
A similar campaign is underway with a payload on peace-computer.com (the same domain is used in
this attack)
Another example:
Sent: den 11 juli 2012 16:19
Subject: Your Amazon.com order of "Withings WiFi Body Scale, Black" has shipped!
Hello,
Shipping Confirmation
Order # 353-3382862-1240149
Your estimated delivery date is:
Friday, July 13 2012
Track your package Thank you for shopping with us. We thought you'd like to know that we shipped this portion of your order separately to give you quicker service. You won't be charged any extra shipping fees, and the remainder of your order will follow as soon as those items become available. If you need to return an item from this shipment or manage other orders, please visit Your Orders on Amazon.com.
Shipment Details
Withings WiFi Body Scale, Black $139.95
Item Subtotal: $139.95
Shipping & Handling: $0.00
Total Before Tax: $139.95
Shipment Total: $139.95
Paid by Visa: $139.95
You have only been charged for the items sent in this shipment. Per our policy, you only pay for items when we ship them to you.
Returns are easy. Visit our .
If you need further assistance with your order, please visit Customer Service.
We hope to see you again soon!
Amazon.com
==========
Subject: Your Amazon.com order of "Boss JWVX3Y6 7-Inch DVD/MP3/CD Widescreen Bluetooth Receiver with USB and SD Card" has shipped!
Hello,
Shipping Confirmation
Order # 087-2687938-8778762
Your estimated delivery date is:
Friday, July 13 2012
Track your package Thank you for shopping with us. We thought you'd like to know that we shipped this portion of your order separately to give you quicker service. You won't be charged any extra shipping fees, and the remainder of your order will follow as soon as those items become available. If you need to return an item from this shipment or manage other orders, please visit Your Orders on Amazon.com.
Shipment Details
Boss JWVX3Y6 7-Inch DVD/MP3/CD Widescreen Bluetooth Receiver with USB and SD Card $149.95
Item Subtotal: $149.95
Shipping & Handling: $0.00
Total Before Tax: $149.95
Shipment Total: $149.95
Paid by Visa: $149.95
You have only been charged for the items sent in this shipment. Per our policy, you only pay for items when we ship them to you.
Returns are easy. Visit our .
If you need further assistance with your order, please visit Customer Service.
We hope to see you again soon!
Amazon.com
==========
These fake AT&T spam emails lead to an attempted malware page at globixlowerright.org:
