2010年8月25日 星期三

FW: Caution! "Newegg.com - Payment Charged" links to FakeAV


-------------------------------------------
???: Joseph Cepe (AV-US)
????: 2010?8?25? ?? 11:04:34
???: Jon Clay (MKT-US); Ivan Macalintal (RD-US); Cyril Lim (AV-US); Newsbank
??: RE: Caution! "Newegg.com - Payment Charged" links to FakeAV
????????

We do block the URLs (found in the spam), and binaries being downloaded. 


-jc

_____________________________________________
From:   Jon Clay (MKT-US) 
Sent:   Wednesday, August 25, 2010 10:01 AM
To:     Ivan Macalintal (RD-US); Cyril Lim (AV-US); Newsbank
Subject:        RE: Caution! "Newegg.com - Payment Charged" links to FakeAV

Are we blocking any of this?  Is there an embedded URL in the spam? Do we block the malware?

Thanks,

Jon Clay
Sr. Core Technology  Marketing Manager
(970) 419-0611

_____________________________________________
From: Ivan Macalintal (RD-US)
Sent: Tuesday, August 24, 2010 8:19 PM
To: Cyril Lim (AV-US); Newsbank
Subject: RE: Caution! "Newegg.com - Payment Charged" links to FakeAV


External blog post published at:

http://blog.trendmicro.com/blogspot-mail2blogger-secret-email-address-used-in-spam-attack/

I might as well add that this is now just being seen in the industry as well..

Regards,

Ivan@FTR



    _____________________________________________
    From:   Cyril Lim (AV-US) 
    Sent:   Tuesday, August 24, 2010 5:48 PM
    To:     Newsbank
    Subject:        Caution! "Newegg.com - Payment Charged" links to FakeAV

    If you've recently bought from newegg and is expecting a mail confirmation, please be aware that we've discovered today a spam mail that redirects you to a site hosting FakeAV.

    It comes from "info@newegg.com" and with confirmation on your sales order being successfully charged to your visa card.

Internal blog here: http://tnl.trendmicro.com.ph/blog/?p=2011 (it will be in external blog site in a while)


Best regards,
cyril

沒有留言: