The Rustock botnet continues to be extremely active in sending out spam with links to malicious sites. So far this week the botnet has toned down its subject lines to a more general news theme, as these samples show:
Yahoo news
MSN news
Morning news
Exclusive news
Hot news
Fresh video news
Requested news
Yahoo news
News alert
Top news
This morning, we also saw a new development from Rustock, a fake ‘CNN Daily Top 10’ message, which looks quite professional, apart from some of the unlikely topics:
In fact, every news link in this email points to a http://[domain-removed]/index2.html page, which is simply another incarnation of the fake video malicious web pages we have seen over the past month, and we have reported on here and here.
This move towards a more professional looking message is concerning, as it is even more likely people will be duped into clicking the link.
MailMarshal Customers are protected from these campaigns with SpamCensor 259.
