Sanity… is for the Weak

Got more spam, and among them were a few rather nasty pieces of deception:

Subject: ROTFLMAO, who is that your with?
From: ldsfrank@dtrqggi.uwjawb.r.12hs.com
Date: Tue, 28 Aug 2007 11:46:44 +1200
What are you thinking…if pat sees this your divorced dude. :-{) check it out yourself http://www.youtube.com/watch?v=***********

Rather innocuous, but instead of going to Youtube if you follow the link, you’ll re-directed to a website that installs a back-door trojan virus on your system. Nasty.

Other variations of the re-direct trick as follows:

Subject: Where did you take that?
From: gliqkaa9516900@kakiko.com
Date: Mon, 27 Aug 2007 00:46:01 -0400
LMAO, I cant believe you put this video online. Everyone can see your face there. LOL check it out yourself http://www.youtube.com/watch?v=***********

Subject: Dude dont send that stuff to my home email…
From: daniellevaillant@hn.vnn.vn
Date: Mon, 27 Aug 2007 02:41:45 +0100
If your dad see this video you made, he is gonna kill you. here is the link I got http://www.youtube.com/watch?v=***********

Subject: I cant belive you did this
From: ad_aditya@wdrake.p0.com
Date: Sun, 26 Aug 2007 19:53:00 +0300
If your mom sees this she this video of you she is gonna freak. this is the link to it. http://www.youtube.com/watch?v=***********

Subject: LOL, dude what are you doing
From: claire@westernenterprises.com
Date: Sun, 26 Aug 2007 06:22:02 -0500
OMG, what are you doing man. This video of you is all over the net. go look at it… http://www.youtube.com/watch?v=***********

Subject: where did you hook up with that?
From: sazlina.mamran@global-wise.com.hk
Date: Sat, 25 Aug 2007 23:35:00 -0700
You can see your face right in the video. its all over the web dude. go look at it… http://www.youtube.com/watch?v=***********

Subject: LOL, dude what are you doing
From: nombeladeborah@everfel.com
Date: Sun, 26 Aug 2007 09:41:55 +0800
OMG, what are you doing man. This video of you is all over the net. here is the link I got http://www.youtube.com/watch?v=***********

I’ve removed the Youtube links…. just in case.

:Links:
The Shit List
‘Storm’ Trojan horse taps into YouTube fever
YouTube Trojan steals user data

Is there a general offensive (aside from just being generally offensive) by spammers these few days?

Got this in the mail:

To: *******************
Subject: Registration Confirmation
From: “Net-Jokes”
Date: Tue, 21 Aug 2007 10:17:40 +0200
Dear Member,

Here is your membership info for Net-Jokes.

Confirmation Number: 1261877245
Temp Login ID: user1482
Temorary Password: rp871

Be Secure. Change your Login ID and Password.

Click here to enter our secure server: http://67.160.***.***/ (I’ve edited the link in case somebody clicked it by accident)

Welcome,
New Member Technical Support
Net-Jokes

Now, the thing is, I don’t remember signing up for this website (or about 3 others similar services!). I mean, I’m a funny enough guy, so I don’t really need the help (hah!) so this seemed more than a little suspicious to me. But the second clue would be their server address. If it’s a legit company or website, shouldn’t the website be something more recognisable? I mean, in the business world, you would want to be easily recognisable and remembered, right?

So doing a little rightous digging, I came up with this:

“If a user clicks on the link. The user will see a web page with one line:

“If you do not see the Secure Login Window please install our Secure Login Applet.”

This web page appears to attempt to exploit an older media player (WinAmp) exploit as well as attempting to trick the user into downloading a virus.”

- source: Internet Storm Centre

Now you know.

P.S. I’ve added a new category called “The Shit List”. It’s a list of all the e-mail addresses of idiots who’ve sent me spam, starting with the previous one. I’m putting this online so other spammers can pick it up and start spamming them as well.

:Links:
Internet Storm Centre
The Spam Diaries

The Shit List
rachael.ray@rosa.megahost.pl - Net-Jokes, virus site
ckrqzpmqizj6kfws_p9ikw@mfl.org - Web-Players, virus site
tracy8194@it.uc3m.es - Bar Tenders Guide, virus site
sood.rehman@phalplace.com - Web-Joker, virus site
gcgk@dummyup.com - Dog Lovers, virus site
khalidm44@yahoo.com.hk - Cancer scam
DERUGIN@abalmere.com - stock tip scam