Monday, August 20, 2007 9:06 AM cmosby

McAfee Avert Labs Blog - Nuwar turns “sexy”

 I didn't see many of the ecard spam show up in my Inbox, but this one started showing up this weekend.

Nuwar turns “sexy”

Sunday August 19, 2007 at 3:37 am CST
Posted by Dmitry Gryaznov

Trackback

Apparently, ecard scam doesn’t work that well any more for Nuwar. Or maybe the virus author read Allysa’s post and decided to abandon the ecard plot before it’s too late. Anyway, now Nuwar spam resorted to the eternal sex theme, the favourite among spammers. The latest Nuwar E-mails have an empty Subject: and the contents is like this:

Lonely? Me too. Look what I like to do when I get lonely.
http://555.37.138.40/

or

I never thought I would ever take these kind of pics, but it makes me so wet. take a look, hehe.
http://555.30.9.127/

or… Well, you get the idea. Basic instinct galore!

P.S. I shamelessly copycatted Hollywood - there are no IP addresses beginning with, or indeed containing, 555.

Source: Computer Security Research - McAfee Avert Labs Blog

Filed under: , ,

Comments

No Comments