Storm Worm Directing Users to Medical Spam Web Sites

US-CERT is aware of a variant of the Storm Worm that sends unsolicited email messages to users and attempts to evade spam filtering. When a user receives this email message, it will contain a link in the format of:

http://<IP Address>/<random directory name>

When visited, the user will be directed to a website containing medical spam information.
http://www.us-cert.gov/current/index.html#new_storm_worm_tactic

Leave a Reply