[SPAM] You are here because one of your friends have invited you
7 Comments Published by Ebisu on Aug 22, 2011 at 6:29 AM.
>>>> Following is a SCAM/E-MAIL WORM actively spreading these days.
The e-mail contains a link: http://corinthianantiques.com/hufbnn.htm
which leads to a web page with the following content:
--------------------------------------------------------------------
You are here because one of your friends have invited you
to try our free trial.
Hurry up! Limited quantity available!
We try to be helpful for you.
Page loading, please wait....
--------------------------------------------------------------------
The web page has got a Meta Refresh leading to the URL: http://gelniga.ru/trial/
as shown below:
<meta http-equiv="refresh" content="4; url=http://gelniga.ru/trial/">
============Original E-mail=======================
================================================
The e-mail contains a link: http://corinthianantiques.com/hufbnn.htm
which leads to a web page with the following content:
--------------------------------------------------------------------
You are here because one of your friends have invited you
to try our free trial.
Hurry up! Limited quantity available!
We try to be helpful for you.
Page loading, please wait....
--------------------------------------------------------------------
The web page has got a Meta Refresh leading to the URL: http://gelniga.ru/trial/
as shown below:
<meta http-equiv="refresh" content="4; url=http://gelniga.ru/trial/">
============Original E-mail=======================
---------- Forwarded message ----------
From: xxxxxxx [Will be a name familiar to you!]
Date: Mon, Aug 22, 2011 at 2:46 PM
Subject:
To: [Could be any names in the contacts book of the affected person!]
From: xxxxxxx [Will be a name familiar to you!]
Date: Mon, Aug 22, 2011 at 2:46 PM
Subject:
To: [Could be any names in the contacts book of the affected person!]
================================================
Also via http://www.conceptwebsolutions.com/wp-includes/gvnyy.htm
http://thedose.com/doseblog/wp-content/uploads/headway/background-uploads/zxfek.htm
UPDATE:
There is an update with extensive list of destination domains of this SPAM/E-mail Worm, available at:
http://spams-hoaxes.blogspot.com/2011/09/spame-mail-worm-you-are-here-because.html
Two of my friends have been caught by this in the last few days. Does this mean that the same thing is being sent out under my name as well?
Ditto Peter Matthews. Could it be a coincidence four of my friends are spaming me the same thing? Or is it so widespread?
also http://chrishahn.us/wp-content/themes/coffeeandmeetings_theme/googles.html?bfc=zg.jhj&fgw=fth.hkm&mbn=ihlb
http://www.harbourchurch.org/wp-content/themes/harb/tdksfn.html?bbs=bbs.nmmnl&jj=nss.jsns&jsi=vcbt
What is really happening here? The people that sent me the email are infected or my pc is the one infected?
If anyone knows a solution for this, please help with information
Also via http://dallasbeauticians.com/wp-admin/fjgtnbs.html?jxvv=reyxzj