Beware of Valentine’s Day Emails


Multiple security vendors, including MX Logic Inc. , Trend Micro Inc. and Panda Security, have issued alerts about new Valentine’s Day-themed spam campaigns that try to dupe users into installing the Waledec bot.

Subject lines for the spam, said Sam Masiello , vice president of information security at MX Logic, are “short and sweet,” and include “Me and You,” “In Your Arms” and “With all my love.” From the spam, users who browse to the embedded link reach a site with a dozen hearts, any one of which download an executable file when clicked.

“Clearly the old Storm folks are working as hard as they can to build up their new botnet, and are following the old tried-and-true methods of centering their social engineering tactics around holiday themes,” said Masiello in a post to the MX Logic blog .

“But it still impresses me that tactics like this continue to work and be so effective, despite how many times it gets recycled,” Masiello said in an interview today.

Storm used Valentine’s Day spam in both 2007 and 2008 to hijack PCs.

via New botnet resurrects Storm’s Valentine’s Day ruse – Network World.

Advertisements

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s

%d bloggers like this: