CA ISBU recently received a volume of spam emails with totally different subjects but after extracting the file attachment on each spam emails, all file attachments are identical and a variant of Win32/Bredolab. Even though we’ve already seen a lot of spam campaign that was used and reused by this variant, this time the spam email subject and topic are totally new.

Fake <Random>…



 

View full post on CA Security Advisor Research Blog

• Zbot’s Latest Spam Campaign Collection
  Last week, CA Technologies ISBU presented in a blog entry, new and different spam campaigns containing the same malicious attachment of Win32/Bredolab variant - a known Trojan downloader family. The f...
• Large spam campaign “Unread messages” from Twitter leads to pharmacy sites
  MX Lab, http://www.mxlab.eu, started to intercept a large spam campaign with the subject “Twitter – You have X unread message(s)”, where the X is a number from 1 to 3,  that leads to...
• Malicious Spam Campaign Preys on Japanese Disaster
  There is a large-scale malicious spam campaign going on currently.  The spam comes in a few different types, one of which imitates a Twitter notification.  The subjects of the spam varies, but sadly, ...
• UPS Spam.. Oh Wait, It’s an FDIC Spam Campaign
  After more than a week of malicious UPS spam campaigns, the Cutwail botnet changed its spamming theme this week. The malicious spam pretends to be from the Federal Deposit Insurance Corporation or FDI...
• YourBizBegin spam campaign on Facebook
  A fairly successful spam campaign is currently active on Facebook. The campaign advertises the web sites YourBizBegin.com and YourBizStart.com, which promise easy money for working from home. Googling...
• YourBizBegin spam campaign on Facebook
  A fairly successful spam campaign is currently active on Facebook. The campaign advertises the web sites YourBizBegin.com and YourBizStart.com, which promise easy money for working from home. Googling...
• Adobe Reader X stops malicious PDF spam campaign dead in its tracks
  A new malicious spam campaign underlines the security benefits of upgrading to the latest version of Adobe Reader - Adobe Reader X. SophosLabs are currently seeing reports of a low-level attack, spamm...
• New Asprox Facebook Spam Campaign
  Just after we posted our blog about the Asprox spam campaign yesterday, we noticed a new Asprox template purporting to be an email from Facebook support. This spam campaign claims the user’s Fac...
• Zbot’s “LinkedIn Messages” Spam Campaign
  We already blogged how Zbot malware authors used social networking sites such as Facebook and Myspace for their spam campaign themes and  recently CA Technologies ISBU received a volume of spam e...
• iTunes abused in spam campaign that redirects users to online pharmacy
  MX Lab, http://www.mxlab.eu, started to intercept a spam campaign that is abusing iTunes to redirect users to the online site of Pharmacy Express. The email messages comes from the address iTunes Stor...