Print | Send on Yahoo! | PDF version | Feed RSS | Filed Under: SPAM REVIEW

The Spam Omelette #53 - When Winning Actually Means Losing

Date: 12/04/2009
Author: Bogdan Botezatu

Welcome to a new issue of our Spam Omelette, the weekly review focused on the latest trends in the spam industry. Before moving forward with the material, please take a look at our testing and map generation methodology, as explained in our first issue.

Week in Review: November 3 - December 2

Spam Omelette 53

1. UNSUBSCRIBE links are back in the game

During the past weeks, newsletter-based spam has witnessed a slight decrease, along with the "main course" it serves: medicine spam. However, the word UNSUBSCRIBE is back in top and has been mostly identified in messages advertising sexual enhancement drugs from Canadian Pharmacy. The message features an invalid unsubscribe link and is sent on the behalf of Yrqnuveixu Inc (a random 10-letter combination that is probably generated by the Pushdo botnet).

 

Unsubscribe

 

2. EMAILs from Viagra

Ranking second in this week's spam top, the word EMAIL has been detected by BitDefender's spam researchers in a medium-size wave of unsolicited mail allegedly advertising Viagra pills. The message headers have been forged to hide the initial originator and all links to Viagra.com have been spoofed to send the user to http://bef.[removed]xeb.cn/ (a clone of the Canadian Pharmacy website).

 

Viagra pfizer spam

 

3. Turkish SITE offering tips & tricks

 

The word SITE has been detected in a less-than-usual spam wave primarily targeting Turkish web users. The e-mail is written in Turkish only and advertises a "new method" of making money online.  In order to start their own business online, the victim has to purchase an electronic book on how to implement and optimize the Google's Adsense revenue system on their websites.

Turkish SITE offering tips & tricks

 

 

 

4. More PILLS delivered directly in your inbox

 

Initially spotted in early May, Acai berry spam makes a dramatic comeback on the fourth place. Disguised as a testimonial from a happy customer, the message includes a link to a website that sells the actual product.

 

Pills spam

 

5. Message from a scammer

 

Ranking last in this week's issue of the Spam Omelette, the word MESSAGE is mostly present in a medium-sized spam wave announcing the user that they are about to receive $15.3 million via courier services. All the victim has to do is reply the mail or contact the scammer by phone and provide them with their full name and address, telephone and mobile numbers and (surprisingly) a copy of their International Passport or Driver's License. Please note that this is not a joke that would eventually leave you without a certain amount of money, but a fully-fledged identity theft scheme that would dramatically impact on your life. Never reply this kind of message and - most important - never provide unknown persons personal information or copies of your documents.

 

message spam

Share our story:
DiggStumbleUpondel.icio.usYahooMyWebFurlGoogle

Comment on this:
Name:
Email:
Your email address will not be published!

Please enter the code from the image below.
The code is not case sensitive
Verification Image
Reload image
 
 
Calendar
March 2010
MoTuWeThFrSaSu
1234567
891011121314
15161718192021
22232425262728
293031    
« Feb March Apr »
Tag Claud
microsoft rogue canadian conficker worm word downadup exploit virus pharmacy software security twitter system computer antivirus omelette malware data spam infected files windows messages review online file bitdefender message trojan