Wednesday, May 6, 2009

Waledac and Google Cash

Not completely concerned with spreading so much anymore, the Waledac botnet spends a lot of time spamming, and spamming a lot! Recently, like many of the other botnets, Waledac has used the Swine Flu concerns, I mean H1N1 concerns, as subject matter for their campaigns. These spam emails claimed to have vaccines for the flu, but instead a link in the email leads you to that old familiar Canadian Pharmaceutical site, which strangely enough only sells the regulars like ED meds. I am quite surprised that they didn't even pretend to have a fake vaccine on these sites, but they didn't. The only one to actually offer a fake vaccine was a piece of Cyrillic spam from last week.
Anyway, enough about that, as I was saying Waledac spends a lot of time spamming nowadays, and today's offering is no different. Seemingly to still be playing off of the global recession, Waledac offers you a way to make from $99 - $375 dollars a day on the internet! The emails arrive with subject lines such as:
"Be your own boss with Google", "Make thousands a month from home", or "Use Google to earn extra cash".
As the subject lines imply, somehow you're going to be using Google to make tons of money. The bodies of these emails go on to say: (click to enlarge)
Once you click on the "Google Cash" link you're taken to a CSS and Javascript rich site where you are to first give up all of your usual and spammable information, including your telephone number, but hurry, according to the running timer at the top, you only have 14 minutes and only 56 spots left for this amazing opportunity!!
After they have your contact information, you're taken to a similar page where they ask for your credit card information, but don't worry the graphic says that it's 100% secure, there's even a little picture of a lock, so you know it has got to be safe, right?!
Luckily for AppRiver clients, we have proactively blocked all of these emails, but always be vigilant and as french singer Amanda Lear said, never trust a pretty face, or is that a flashy web page with too good to be true promises, still, I think the point's the same.

0 comments: