#medfos

[threattrack]

CNN Breaking News Spam: "The United States began bombing!"

Subjects Seen:

CNN: "The United States began bombing"

Typical e-mail details:

(CNN) -- Pentagon officials said that the United States launched the first strikes against Syria. It was dropped about 15 bomn on stalitsu syria Damascus.  Full story >> Rescuing Hannah Anderson *Sushmita Banerjee was kidnapped and killed in Afghanistan, police say *No one has claimed responsibility for her death, but police suspect militants *Banerjee wrote "A Kabuliwala's Bengali Wife" about her escape from the Taliban

Malicious URLs

nevisconservatories.co.uk/soupy/index.html

axsysfinancial.biz/mingle/index.html

holatorino.it/favor/index.html

luggagepoint.de/topic/able_disturb_planning.php

[threattrack]

Current PayPal related Spam Ploys

Resolution of Case

Your Balance was Filmed

Identity Issue

History of Transactions

Subjects Seen:

Resolution of case #PP-<random>

With your balance was filmed - 500 $ -Resolution of case #PP-<random>

Identity Issue #PP-<random>

History of transactions #PP-<random>

Typical e-mail details:

Resolution of Case:

Our records indicate that you never responded to requests for additional information about this claim. We hope you review the attached file and solve the situation amicably. For more details please see on the page View all details Sincerely, Protection Services Department

_________________________________________________

Your Balance was filmed:

Transaction: {figure } {SYMBOL } With your balance was filmed : - 600 $  -20 $   -49 $ --------------- Balance is:  625 $ For more information, please see page View all history Sincerely,

_________________________________________________

Identity Issue:

We are writing you this email in regards to your PayPal account. In accordance with our "Terms and Conditions", article 3.2., we would like to kindly ask you to confirm your identity by completing the attached form. Please print this form and fill in the requested information. Once you have filled out all the information on the form please send it to verification @paypal.com along with a personal identification document (identity card, driving license or international passport) and a proof of address submitted with our system ( bank account statement or utility bill ). For more details please see on the page View all details Your case ID for this reason is PP-<random> For your protection, we might limit your account access. We apologize for any inconvenience this may cause. Thanks, PayPal

_________________________________________________

History of Transactions:

On your account malicious activity , for 1 hour was filmed around $ 900 , in small amounts In order to avoid blocking the account you need to go in. Authenticate Now Sincerely, Services for protection Department

Malicious URLs

ervinscarpet.com/impartially/index.html

jp-intarsia.de/concurred/index.html

hadjis-law.com/creamy/index.html

taylorandgregory.co.uk/assent/index.html

shiing01.x-y.net/stopping/index.html

fonotape.com.ar/bosun/index.html

fonotape.com.ar/supplicate/index.html

dshapovalov.info/topic/able_disturb_planning.php

dshapovalov.info/forum/viewtopic.php

petrasolutions.com/JpVsf.exe

mystatesbororealestate.com/rhdkD6.exe

mvwebsites.com.au/bmSe4BN.exe

[threattrack]

Facebook News feed Suggestion Spam

Subjects Seen:

Hi <name>, here are some Pages you may like

Typical e-mail details:

Like these Pages to get updates in your News Feed.

Malicious URLs

iecc.com.au/complying/index.html

pictondental.com.au/hilda/index.html

ladiscoteca.org/john/index.html

bonway-onza.com/thalami/index.html

watchfp.mobi/topic/able_disturb_planning.php

mvwebsites.com.au/bmSe4BN.exe

mystatesbororealestate.com/rhdkD6.exe

mit-stolz-vorbei-dollbergen.de/w8BDM.exe

petrasolutions.com/JpVsf.exe

[threattrack]

Paychex Insurance Spam

Subjects Seen:

Paychex Insurance Agency

Typical e-mail details:

The security of your personal information is of the utmost importance to Paychex, so we have sent the attached as a secure electronic file. For more details please see on the page. View all details >> Note: The attached file contains encrypted data. In order to view the file, you must have already installed the decryption software that was previously provided by Paychex. If you have any question please call us at 800-472-0072, option 4. Representatives are available to assist you Monday through Thursday between 8:00 a.m. and 8:00 p.m. ET and Friday between 8:00 a.m. and 6:00 p.m. ET. Paychex Insurance Agency

Malicious URLs

ftp(DOT)willetthofmann.com/logistically/index.html

ftp(DOT)willetthofmann.com/shadiest/index.html

abesonthego.com/topic/able_disturb_planning.php

[threattrack]

Visa/PayPal Spam

Subjects Seen:

Resolution of case #PP<random>

Typical e-mail details:

Dear Visa card holder, Our records indicate that you never responded to requests for additional information about this claim. We hope you review the attached file and solve the situation amicably. For more details please see on the page View all details on the Usa.visa.com/personal/ Visa does not tolerate fraud or illegal activities. Your complaint has been noted in the record of the Visa card holder you reported. If we find this user has violated our policies, we will investigate and take appropriate action. If this occurs, you may be contacted in the future about the status of this complaint. To make sure future transactions proceed smoothly, we suggest you visit the PayPal site and click the Security Center link located at the top of any page. There you will find tips on how to avoid fraudulent sellers in the "Fraud Prevention Tips for Buyers" section.

Malicious URLs

dp56148868.lolipop.jp/brassing/index.html

rossizertanna.it/occupancy/index.html

abesgrillnbar.com/topic/able_disturb_planning.php

[threattrack]

Facebook Status Comment Spam

Subjects Seen:

Victoria <removed> commented on your status

Typical e-mail details:

Hello,

Victoria <removed> commented on your status.

Victoria wrote: "so cute;)"

Malicious URLs

battle-box.co.uk/inventive/index.html

wodniok.com/hardheartedly/index.html

ftp(DOT)twstyle.com/abashing/index.html

abesgastropub.net/topic/able_disturb_planning.php

[threattrack]

CNN Breaking News Rehtaeh Parsons Spam

Subjects Seen:

CNN: " Canadian teenager Rehtaeh Parsons"

Typical e-mail details:

2 face charges in case of Canadian girl who hanged self after alleged rape Canadian teenager Rehtaeh Parsons Two 18-year-old men face child pornography charges in connection with the case of a 17-year-old girl who hanged herself after she was allegedly gang-raped and bullied online, Canadian authorities said Thursday evening.  Full story >>

Malicious URLs

retailers.truelinkswear.com/rundown/index.html

dp56148868.lolipop.jp/numeracy/index.html

ftp(DOT)equinejournal.com/apogee/index.html

ead-togo.com/croons/index.html

guterprotectionperfection.com/topic/able_disturb_planning.php

[threattrack]

American Express Spending Notification Spam

Subjects Seen:

Account Alert: Recent Charge Approved

Typical e-mail details:

Dear Customer, Spend Activity since your last statement close date has reached the notification amount you set for your account.

Malicious URLs

blackamber.net/ulnq.html

medialifegroup.com/~medialifeyerel/xkaq.html

drstephenlwolman.com/topic/sessions-folk-binds.php

northernforestcanoetrail.com/adobe/update_flash_player.exe