Getting pounded by some spam this weekend.
This is coming to me as odd, or it did until I did some research. Check out this link for information on this Joe-Job malvertising spam. This is targeted against malekal.com (french blog that targets spam and malware). It seems like it is coming from a botnet somewhere. I checked our network and nothing is being sent on our behalf, and I have no open relays. It also seems like there is a bot digging email
Looking at the headers (I am not posting them) they are coming from Thailand. I submitted it to barracuda (my spam filter) and they are going to block in. In the mean while I suggest to block by subject in your spam filter.
Subject: Email SPAM for malekal.com
Theses emails SPAM are sent from a botnet (check the mails headers), im not
responsible of theses spam emails.
Someone is probably trying to get the site blacklisted or to get bad reputation
(called this "a Joe Job" - see :
http://blog.dynamoo.com/2013/08/malekalcom-joe-job.html )
The responsible is " Reveton Guy ", try to get revenge after a mass shutdown of
their malvertising :
http://www.malekal.com/2013/07/30/en-juicyads-reveton-malvertising/
http://www.malekal.com/2013/07/28/en-plugrush-reveton-malvertising/
http://www.malekal.com/2013/07/26/en-reveton-adxpansion-com-malvertising/
The August 11, they tried to get my website blacklisted using hacked website :
http://www.malekal.com/2013/08/12/en-reveton-go-now-by-hacked-website/