During the weekend, our spamtraps have been receiving a new campaign from the Waledac botnet. This latest spam run aims to distribute an updated copy of Waledac binary. Subject lines may include:
- America the Beautiful
- Amazing Independence Day Salute
- Fourth of July Fireworks Shows
- Happy Fourth of July
- Independence Day firework broke all records
- Sparkling Celebration of Independence Day
- Super 4th
- This Land Is Your Land
- Time for Fireworks
- Happy Birthday USA
- Happy Birthday America
- Celebrate Independence
- Well done 4th
- Long live America
- Light up the sky
- The best of 4th of July Salute
- Proud to be an American
- Home of the Brave
- Celebrate the Pride
- Spectacular fireworks show
- Amazing Independence Day
- Let's celebrate Independence Day
The email body contains a link that points to a fake YouTube website serving the Waledac executable file. If you wish to block the domain names, you can get the list here.
You can read more information about this spam campaign from our blog.