Last week, CA Technologies ISBU presented in a blog entry, new and different spam campaigns containing the same malicious attachment of Win32/Bredolab variant – a known Trojan downloader family. The following day we received a similar incident; another large volume spam campaign having variety of subject and content, each contains the same Win32/Zbot variant attachment.

The email subjects are…



 

View full post on CA Security Advisor Research Blog

• Latest Bredolab Spam Campaign Collection
  CA ISBU recently received a volume of spam emails with totally different subjects but after extracting the file attachment on each spam emails, all file attachments are identical and a variant of Win3...
• Zbot’s eCard and Business Online Banking Account Spam Campaign
  Fake Business Online Banking Account Alert! We received spam emails disguised as a legitimate email about your "Business Online Banking Account". The spam mail informs the recipient in orde...
• Zbot’s “Royal Mail Delivery Invoice” Spam Campaign
  CA ISBU recently received new spammed emails disguised as a legitimate email from Royal Mail and requests the user to view the attached invoice [Figure 1].        &...
• Large spam campaign “Unread messages” from Twitter leads to pharmacy sites
  MX Lab, http://www.mxlab.eu, started to intercept a large spam campaign with the subject “Twitter – You have X unread message(s)”, where the X is a number from 1 to 3,  that leads to...
• Malicious Spam Campaign Preys on Japanese Disaster
  There is a large-scale malicious spam campaign going on currently.  The spam comes in a few different types, one of which imitates a Twitter notification.  The subjects of the spam varies, but sadly, ...
• UPS Spam.. Oh Wait, It’s an FDIC Spam Campaign
  After more than a week of malicious UPS spam campaigns, the Cutwail botnet changed its spamming theme this week. The malicious spam pretends to be from the Federal Deposit Insurance Corporation or FDI...
• YourBizBegin spam campaign on Facebook
  A fairly successful spam campaign is currently active on Facebook. The campaign advertises the web sites YourBizBegin.com and YourBizStart.com, which promise easy money for working from home. Googling...
• YourBizBegin spam campaign on Facebook
  A fairly successful spam campaign is currently active on Facebook. The campaign advertises the web sites YourBizBegin.com and YourBizStart.com, which promise easy money for working from home. Googling...
• Adobe Reader X stops malicious PDF spam campaign dead in its tracks
  A new malicious spam campaign underlines the security benefits of upgrading to the latest version of Adobe Reader - Adobe Reader X. SophosLabs are currently seeing reports of a low-level attack, spamm...
• New Asprox Facebook Spam Campaign
  Just after we posted our blog about the Asprox spam campaign yesterday, we noticed a new Asprox template purporting to be an email from Facebook support. This spam campaign claims the user’s Fac...