#winwebsec

[threattrack]

Wedding Invitation Spam

Subjects seen:

Wedding Invite

Wedding Invitation

Typical e-mail details:

 You are Cordially Invited to Celebrate the Our Wedding On Tuesday March the 29 at Four O'clock Followed by a Reception Get Full Invitation Text

Malicious URLs

accf.info/components/.cixlcg.php?receipt=ss00_323

ace-press.org/components/.gnucla.php?receipt=ss00_323

ademasde.net/components/.qwas57.php?receipt=ss00_323

advocatus-okara.org/components/.ncefcx.php?receipt=ss00_323

agirversaillesgrandsiecle.org/components/.bhpupz.php?receipt=ss00_323

ahataxi.sk/components/.otmojc.php?receipt=ss00_323

actren.net/components/.z6harp.php?receipt=ss00_323

aegap.org/components/.deyoc5.php?receipt=ss00_323

aegmin.org/components/.0fn0br.php?receipt=ss00_323

affip.org/components/.hwk8qn.php?receipt=ss00_323

Additional Notes:

None at this time.

[threattrack]

FedEx Spam Continues

Subjects seen:

Tracking ID [removed]

Typical e-mail details:

Dear Customer,

Your parcel has arrived at the post office at January 29.Our courier was unable to deliver the parcel to you.

To receive your parcel, please, go to the nearest office and show this receipt.

Malicious URLs

hobbi.megansk.ru/misc/teasers.php?info=800_173322440

Additional Notes:

Related to FedEx spam last seen 1/7.

[threattrack]

Malicious FedEx Spam Continues

Subjects seen:

ID [removed]

Typical e-mail details:

Dear Customer,

Your parcel has arrived at the post office at December 31.Our courier was unable to deliver the parcel to you.

To receive your parcel, please, go to the nearest office and show this receipt.

Malicious URLs

cmr-gb.co.uk/IFJKPXMJAG.php?php=receipt

magic8tech.net/SHFEYXAJHP.php?php=receipt

mindplusmuscle.com/TFLCGWRXRO.php?php=receipt

pizzatainer.com/NFYYUBPKNX.php?php=receipt

fibam.be/CMNVTXINXV.php?php=receipt

Additional Notes:

Related to FedEx Spam last seen 12/18.

[threattrack]

Malicious FedEx Spam Continues

Subjects seen:

Tracking ID [removed]

Typical e-mail details:

Dear Customer,

Your parcel has arrived at the post office at December 7.Our postrider was unable to deliver the parcel to you.

To receive a parcel, please, go to the nearest our office and show this postal receipt.

Malicious URLs

67.199.28.110/BUCDSPPFPT.php?php=receipt

oncologyrecruiters.com/WEVFYUXLOF.php?php=receipt

suunto.361corp.com/LFUOWELVCN.php?php=receipt

Additional Notes:

Related to FedEx Spam last seen 12/10.

[threattrack]

Malicious FedEx Spam Continues

Subjects seen:

[random]

Typical e-mail details:

Dear Customer, Your parcel has arrived at the post office at December 7.Our postrider was unable to deliver the parcel to you. To receive a parcel, please, go to the nearest our office and show this postal receipt.

Malicious URLs

grille-nacht-cafe.de/ALULXINXXL.php?php=receipt

economic-drive.de/MLYWKUMWJY.php?php=receipt

premier.mu/VHWYZZRASS.php?php=receipt

studio-psicologia-arezzo.it/ZIMJLMSWKF.php?php=receipt

internetserviceinfo.com/UGKHAIQNFZ.php?php=receipt

Additional Notes:

Related to FedEx Spam last seen 11/28.

[threattrack]

Better Business Bureau Accreditation Services Spam

Subjects seen:

SBQ Form #[removed]

Typical e-mail details:

Thank you for supporting your Better Business Bureau (BBB). As a service to BBB Accredited Businesses, we try to ensure that the information we provide to potential customers is as accurate as possible. In order for us to provide the correct information to the public, we ask that you review the information that we have on file for your company. We encourage you to print this SBQ Form, answer the questions and respond to us. (self-extracting archive, Adobe PDF) Please look carefully at your telephone and fax numbers on this sheet, and let us know any and all numbers used for your business (including 800, 900, rollover, and remote call forwarding). Our automated system is driven by telephone/fax numbers, so having accurate information is critical for consumers to find information about your business easily. Thank you again for your support, and we look forward to receiving this updated information. Sincerely, Accreditation Services

Malicious URLs

reomaintenanceservices.info/oCggE.exe

mastpartners.com/xeYa0iD.exe

klimasysteme-taut.de/cgWPSYs.exe

Additional Notes:

None at this time.

[threattrack]

NY Better Business Bureau Attachment Spam

Subjects seen:

FW:Case #[removed]

Typical e-mail details:

Owner/Manager

The Better Business Bureau has received the above-referenced complaint from one of your customers regarding their dealings with you. The details of the consumer's concern are included on the reverse. Please review this matter and advise us of your position.

As a neutral third party, the Better Business Bureau can help to resolve the matter. Often complaints are a result of misunderstandings a company wants to know about and correct.

In the interest of time and good customer relations, please provide the BBB with written verification of your position in this matter by December 05, 2012. Your prompt response will allow BBB to be of service to you and your customer in reaching a mutually agreeable resolution. Please inform us if you have contacted your customer directly and already resolved this matter.

The Better Business Bureau develops and maintains Reliability Reports on companies across the United States and Canada . This information is available to the public and is frequently used by potential customers. Your cooperation in responding to this complaint becomes a permanent part of your file with the Better Business Bureau. Failure to promptly give attention to this matter may be reflected in the report we give to consumers about your company.

We encourage you to print this complaint (attached file), answer the questions and respond to us.

We look forward to your prompt attention to this matter.

Sincerely,

BBB Serving Metropolitan New York, Long Island and the Mid-Hudson Region

Malicious URLs

89.166.50.40/ponyb/gate.php

musica-e-live.de/2kn.exe

de-san.com/bxuw.exe

antoniosanchez.com/cok8v.exe

adcock-com.win26.wadns.net/ZPiFex.exe

Additional Notes:

None at this time.

[threattrack]

Malicious FedEx Spam Continues

Subjects seen:

Tracking Detail [removed]

Number [removed]

Typical e-mail details:

Your parcel has arrived at the post office at November 26.Our postrider was unable to deliver the parcel to you.

To receive a parcel, please, go to the nearest our office and show this postal receipt.

Malicious URLs

thebusinessplus.com/MUTBQJADRE.html

mylauren.com/CCOSGTLVTA.html

milrecados.com/SWVOXIGJEV.html

cantoncityutah.com/OXSJOVVYOE.html

watertaxis.mobi/APQTJNWNPV.html

affiliate-erfolg.de/KQEZOOWAYE.html

btv-bosseln.de/EJWFBEEBWI.html

atimbershop.com/GULSHSFCHM.html

82.113.204.228//get/43d982be5107d1b8de698e16759b9956.exe

211.172.112.7//get/43d982be5107d1b8de698e16759b9956.exe

Additional Notes:

Related to FedEx spam last seen 11/20.