FW: Caution! "Newegg.com - Payment Charged" links to FakeAV

-------------------------------------------
???: Joseph Cepe (AV-US)
????: 2010?8?25? ?? 11:04:34
???: Jon Clay (MKT-US); Ivan Macalintal (RD-US); Cyril Lim (AV-US); Newsbank
??: RE: Caution! "Newegg.com - Payment Charged" links to FakeAV
????????

We do block the URLs (found in the spam), and binaries being downloaded. 

-jc

_____________________________________________
From:   Jon Clay (MKT-US) 
Sent:   Wednesday, August 25, 2010 10:01 AM
To:     Ivan Macalintal (RD-US); Cyril Lim (AV-US); Newsbank
Subject:        RE: Caution! "Newegg.com - Payment Charged" links to FakeAV

Are we blocking any of this?  Is there an embedded URL in the spam? Do we block the malware?

Thanks,

Jon Clay
Sr. Core Technology  Marketing Manager
(970) 419-0611

_____________________________________________
From: Ivan Macalintal (RD-US)
Sent: Tuesday, August 24, 2010 8:19 PM
To: Cyril Lim (AV-US); Newsbank
Subject: RE: Caution! "Newegg.com - Payment Charged" links to FakeAV

External blog post published at:

http://blog.trendmicro.com/blogspot-mail2blogger-secret-email-address-used-in-spam-attack/

I might as well add that this is now just being seen in the industry as well..

Regards,

Ivan@FTR

_____________________________________________
From:   Cyril Lim (AV-US) 
Sent:   Tuesday, August 24, 2010 5:48 PM
To:     Newsbank
Subject:        Caution! "Newegg.com - Payment Charged" links to FakeAV

If you've recently bought from newegg and is expecting a mail confirmation, please be aware that we've discovered today a spam mail that redirects you to a site hosting FakeAV.

It comes from "info@newegg.com" and with confirmation on your sales order being successfully charged to your visa card.

Internal blog here: http://tnl.trendmicro.com.ph/blog/?p=2011 (it will be in external blog site in a while)

Best regards,
cyril