Rustock malicious spam update

The malicious spam campaign from the Rustock botnet shows no sign of letting up.  Today the URLs include the page "watchit.html' which takes the user to a familiar looking template which we recently outlined here.

The subject lines are numerous, and change often.  Here is a sample from today:

The spammers appear to be getting some of these subject lines from satire news sites.  The "John McCain Eats a Bug" can be found as a story at faux-news.com here.

The websites used to host the malicious html pages appear to be legitimate, and also numerous.  At this stage it is unclear how these sites are being compromised in order to host the files.  A simple Google search from today turned up around 200 hits, which is probably just the tip of the iceburg:

In addition to email spam, this campaign also extends to blogspam.  We have noticed many blog entries on blogspot and others, similar to the following:

MailMarshal customers are protected from these campaigns with SpamCensor 257.