Security researchers from WebSense have intercepted a currently active and circulating malicious spam campaign.
The spamvertised emails contain subjects and messages attempting to socially engineer users into thinking that spam is coming from their mailboxes, and that they face legal action:
In this campaign, emails are spoofed to appear as though they are sent from established companies. The emails even formally claims that legal action will be taken because of the spam you have sent. These emails with the fake warning even attach a ZIP file that contains a scanned copy of a document that is supposed evidence of your spam.
- We will be impelled to sue you
- We are going to sue you
- We are suing you
- You are sending add messages
- A message from our security service
- Spamvertised body of the message:
Hello. Your email is sending spam messages. If you don't stop sending spam, we will be impelled to sue you! We've attached a scanned copy of the document assembled by our security service to this letter. Please care carefully read through the document and stop sending spam messages. This is the final warning.
Users are advised not to interact with suspicious emails, or spam emails in general.
- Spamvertised ‘Scan from a Xerox WorkCentre Pro’ leads to malware
- Malware Watch: FDIC and Western Union themed emails lead to malware
- Spamvertised 'Facebook notification' leads to exploits and malware
- Spamvertised Uniform traffic tickets and invoices lead to malware
- Spamvertised United Parcel Service notifications lead to malware
- Spamvertised United Parcel Service emails lead to scareware
- Federal Reserve themed emails lead to ZeuS crimeware
- ‘McDonald’s Free Dinner Day’ emails lead to scareware
- Spamvertised bank statements serving scareware
- Spamvertised Post Office Express Mail (USPS) emails lead to malware
- Spamvertised “Reqest Rejected” campaign leads to scareware
- Spamvertised ‘Facebook. Your password has been changed!’ emails lead to malware