madison

Zero Day

Ryan Naraine and Dancho Danchev

'McDonald's Free Dinner Day' emails lead to scareware

By | June 22, 2011, 4:58am PDT

Summary: Researchers from BitDefender have intercepted a currently ongoing spamvertised campaign impersonating McDonald’s.

Researchers from BitDefender have intercepted a currently ongoing spamvertised campaign impersonating McDonald’s.

Upon downloading the executing the invitation_card_0541.zip attachment, users are exposed to a scareware variant currently detected as Trojan.FakeAV.LSX.

Sample subject: We invite everyone to the day of free food

Sample attachment: invitation_card_0541.zip

Sample message: McDonald’s invites you to The Free Dinner Day which will take place on 27 June, 2011, in every cafe of ours.

Free Day’s Menu!
- Doube Quarter Pounder with Cheese
- Chichen Selects Premium Breast Strips
- Side Salad
- Vanilla Triple Thick Shake
- McCafe Caramel Mocha

Print the invitation card attached to the letter and show it at the cash desk of any of our restaurants. Every manager will gladly take your card anad issue you a tasty dish of Free Day. And remember! Free Day is a while five free dishes!

Thank you for your credence.
We really appreciate it.

Users are advised not to interact with suspicious emails, or spam emails in general.

Kick off your day with ZDNet's daily e-mail newsletter. It's the freshest tech news and opinion, served hot. Get it.

Topics

Dancho Danchev is an independent security consultant and cyber threats analyst, with extensive experience in open source intelligence gathering, malware and cybercrime incident response.

Disclosure

Dancho Danchev

More details on Dancho Danchev's current and past professional affiliations, can be found in his LinkedIn profile.

Biography

Dancho Danchev

Dancho Danchev is an independent security consultant and cyber threats analyst, with extensive experience in open source intelligence gathering, and cybercrime incident response. He's been an active security blogger since 2007, and maintains a popular security blog sharing real-time threats intelligence data with the rest of the community on a daily basis. More details on Dancho Danchev's current and past professional affiliations, can be found in his LinkedIn profile. You can also follow him on Twitter

Talkback - Tell Us What You Think

Formatting +
BB Codes - Note: HTML is not supported in forums
  • [b] Bold [/b]
  • [i] Italic [/i]
  • [u] Underline [/u]
  • [s] Strikethrough [/s]
  • [q] "Quote" [/q]
  • [ol][*] 1. Ordered List [/ol]
  • [ul][*] · Unordered List [/ul]
  • [pre] Preformat [/pre]
  • [quote] "Blockquote" [/quote]
Click Here

The best of ZDNet, delivered

ZDNet Newsletters

Get the best of ZDNet delivered straight to your inbox

Facebook Activity

White Papers, Webcasts, & Resources