World Cup Bad News – Malicious Spam;Malicious virus notification emails on the prowl

Websense® Security Labs™ ThreatSeeker™ Network has detected a new wave of interesting malicious emails.  At the dawn of the eagerly anticipated World Cup tournament, we would expect to be inundated with suitably themed spam.  The sample we have encountered today is a little different from the usual, as the technique used may not raise suspicion.  We have seen over 80,000 email messages in this new campaign, which uses an HTML attachment with an embedded JavaScript.  Upon execution, this script leads to a malicious Web site, from which we are protecting our customers with our real-time analytics in our ACE engine.

http://community.websense.com/blogs/securitylabs/archive/2010/06/11/world-cup-bad-news.aspx

Malicious virus notification emails on the prowl

Websense® Security Labs™ ThreatSeeker™ Network has detected a new wave of interesting malicious emails.  This new campaign uses some social engineering scare tactics to encourage users to open the HTML attachment sent in the email.  The interesting thing about the attachment is that it’s only script code and the script code looks very much like script code which has been used in script injections on legitimate Web pages.  The body of the email states that the recipient has been infected with a number of viruses and that the recipient should open the attached HTML document to clean up his or her computer.

More with video clip in http://community.websense.com/blogs/securitylabs/archive/2010/06/10/malicious-virus-notification-emails-on-the-prowl.aspx

Leave a Reply