Malicious spam campaign regarding Adobe Acrobat 2010 PDF Reader and VOIP Addons for Skype


MX Lab reported earlier on regarding a malicious spam campaign regarding an offer to download and buy PDF Reader/Writer for Windows and Mac in the article “Emails offering PDF Reader 2010 lead to unsecure payment site“.

Yesterday, MX Lab intercepted more of these messages and when investigating the emails we found out that it was leading potential buyers to the same malicious web sites in order to steal credit card information.

The first campaign was names “Upgrade New Adobe Acrobat 2010 PDF Reader Alternative” and had the following email body:

ADOBE PDF READER SOFTWARE UPGRADE NOTIFICATION

This is to remind that a new version of Adobe Acrobat Reader with enhanced features for viewing, creating, editing, printing and internet-sharing PDF documents has been released.

To upgrade your application:

+ Go to hxxp://www.pdf-adobe-download.com
+ Get your options, download and upgrade.

DOWNLOAD ADOBE ACROBAT READER

hxxp://www.pdf-adobe-download.com

Thanks and best regards,
John Brakes

Adobe Acrobat Reader Support
Copy rights Adobe 2010 © All rights reserved
1005 Marrinbird Rd | Merryton | CA | 96523 | USA
==============================================
==============================================

Unsubscribe ******@*****.co.uk from this list:
hxxp://pdf-adobe-upgrade.us2.list-manage.com/unsubscribe?u=e2c356e74c045c91e360cd969&id=dd23152aec&e=560b513fd2&c=772f545fad

When clicking the URL you will get the following web site:

The second campaign was named “Download VOIP Addons for Skype Free Talkse” and had the following email body:

SKYPE VoIP ADDONS UPDATES

This is to notify that new updates have been released for Skype. Following are major new features:

- Talk more for free via Voice Over IP (VoIP)
– Lower cost when connecting to landlines (much cheaper than Calling Card)
– Record your conversation (better than telephone quality)
– Instant messaging & file-sharing, video calls
– Now available on PSP!

hxxp://www.skype-upgrade.com

To check and upgrade, go to Skype Updates Center or copy this link to your web browser:

hxxp://www.skype-upgrade.com

Skype has changed the way we think of telecommunications.

Thank you for choosing us.

With best regards,

Skype Support

3029 Maranta Rd, NY, 10310, USA
Copy rights Skype 2010 – All Rights Reserved
Website:http://www.skype-upgrade.com
==============================================

Unsubscribe ****@****.co.uk from this list:
hxxp://pdf-adobe-upgrade.us2.list-manage.com/unsubscribe?u=e2c356e74c045c91e360cd969&id=dd23152aec&e=448e954c4e&c=5844889721

When clicking the URL you will get the following web site:

Both emails are not only leading to a malicious web site but are also quite misleading because both messages are signed by either Adobe Support or Skype Support departments and they appear to be comin gfrom Adobe or Skype based on the content.

Using the Download on the web site we got redirected to hxxps://secureonline.ru/. This time, we follow the Skype campaign because we haven’t covered it in detail but it is the same technique as in the past with the PDF Reader/Writer campaign.

In the previous PDF Reader/Writer campaign we noticed the abcense of an SSL connection but this time it is here. So we believe. There is a scripting that will masquerade the URL as safe by using SSL for secure payment but this is not entirely true.

From this point on the phishing begins by gathering your data.

Make a selection of the membership.

And here the credit cards details are gathered.

When investigating the messages further on, we found out that the spam campaigns where sent from a well known Email Service Provider MailChimp. We did found the abuse tracker code X-campaignid: mailchimpe2c356e74c045c91e360cd969.584***** so it was very easy to contact MailChimp and report the spam campaign.

We did got a polite email in return from MailChimp with the message “This account has been permanently suspended noting it violates our terms of use and CANSPAM. This is clearly spam and we’re glad you reached out to us about it.”.

It is of course good to see that companies like MailChimp really take an abuse report seriously.

30 Responses to Malicious spam campaign regarding Adobe Acrobat 2010 PDF Reader and VOIP Addons for Skype

  1. greg says:

    So why isn’t Skype officially warning people about this?

  2. Mike says:

    They’ve moved on, of course. Can someone tell me if a message ID is in this one so I can complain? There’s code in this header I’m unfamilar with. When did service providers start putting in tracers?

    X-Message-Delivery: Vj0xLjE7dXM9MDtsPTA7YT0wO0Q9MTtTQ0w9MA==
    X-Message-Status: n
    X-SID-PRA: Adobe PDF Support
    X-AUTH-Result: NONE
    X-Message-Info: JGTYoYF78jFROTkTLRImq+7qVq273o6c0VUHvRK3BB8nhBv99Buk5iyiFMxv8EnAW+ARhAmiAT+qchnzA4Dl+3e8cEXdCJ1n
    Received: from eb18.emailsparkle.com ([216.240.181.27]) by SNT0-MC3-F2.Snt0.hotmail.com with Microsoft SMTPSVC(6.0.3790.4675);
    Sun, 19 Sep 2010 18:32:18 -0700
    Received: by eb18.emailsparkle.com (Postfix, from userid 0)
    id CEB663241D8; Sun, 19 Sep 2010 18:32:17 -0700 (PDT)
    To: ********
    Subject: Upgrade New Adobe Acrobat 2010 PDF Reader Alternative
    Message-ID:
    DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=eb18.emailsparkle.com; i=@eb18.emailsparkle.com; q=dns/txt; s=gmmailerd; t=1284946275; h=From; bh=47DEQpj8HBSa+/TImW+5JCeuQeRkm5NMpJWZG3hSuFU=; l=0; b=LypcnyBiSZd1Yp9sdSwf9gjD2+pm04g3327k6id/sPn6l2bYaNDnQmrbNx6hVbhMZnzvBUsOgw1tn48WZ0gJHlp2Mz6PECo+ydNvDZRr1T6Z2uc4I5PvvwwAlPpHoBdm/CGBegQmDJaq5EnwzsxUaaXvw6W9BPJ199O/33m7G/U=
    From: “Adobe PDF Support”
    Mime-Version: 1.0
    Content-Type: text/plain; charset=iso-8859-1
    Content-Transfer-Encoding: quoted-printable
    Date: Sun, 19 Sep 2010 18:32:17 -0700 (PDT)
    Return-Path: returns@eb18.emailsparkle.com
    X-OriginalArrivalTime: 20 Sep 2010 01:32:18.0608 (UTC) FILETIME=[A9ED0300:01CB5863]

    • mxlab says:

      We have seen this too with return@b.eb13.emailsparkle.com as from address. We visited http://www.emailsparkle.com and got a webpage with some text regarding message abuse and privacy policy and so on. At the end you can forward the email headers of the message in question.

      A bit strange that there is no link to a mailing company but quite often, mailing companies also use different domains. Some of those mailing companies operate in what we call a “grey zone”. They send the same campaign over and over but from different domains to avoid blocked emails and spam complaints. You unsubscribe from one domain but the next you have emails from another domain, and in some cases with the same campaign content, so technically they are avoiding complaints this way.

      Later on, we have seen messages from news-return-4-info=******.be@digioffice-mail.be with the following headers (note that emailsparkle.com is also present in the headers):

      Received: from mail.pi-group.net ([94.126.48.8])
      by gate2.mxlab.eu (MX Lab Gateway) with SMTP id CQA68002
      for ; Mon, 20 Sep 2010 09:58:02 +0200
      Received: (qmail 27777 invoked by uid 888); 20 Sep 2010 07:49:41 -0000
      Mailing-List: contact news-help@digioffice-mail.be; run by ezmlm
      Precedence: bulk
      X-No-Archive: yes
      List-Post:
      List-Help:
      List-Unsubscribe:
      List-Subscribe:
      Delivered-To: mailing list news@digioffice-mail.be
      Delivered-To: moderator for news@digioffice-mail.be
      Received: (qmail 1448 invoked from network); 19 Sep 2010 07:28:42 -0000
      To: news@digioffice-mail.be
      Subject: Upgrade New Adobe Acrobat 2010 PDF Reader Alternative
      Message-ID:
      DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=eb16.emailsparkle.com; i=@eb16.emailsparkle.com; q=dns/txt; s=gmmailerd; t=1284881301; h=From; bh=47DEQpj8HBSa+/TImW+5JCeuQeRkm5NMpJWZG3hSuFU=; l=0; b=PX3/5rKMbX/pYcp/hIJXfN5tptO9/MzJObDQOdNz5nwc2gt7zZx9gRV1pR7rXUtszswPd7Yry4lhQB8M73zQ27e2TNxJLBg5EhX7s1QAba1EHEuFJuAcWveDIpKmR3LioWNZ4+qehtCSQjHfwd7wK+lnzyhuvMEIb+HhoVJlwWc=
      From: “PDF Support”

      When visiting digioffice-mail.be you get a login screen but that’s basically it. This domain is registered to Mario Vleugels from West Technologies http://www.west-tec.com/, located in Herentals, Belgium.

    • mxlab says:

      The domain emailsparkle.com is owned by Dotster – http://www.dotster.com/ – and we already have contacted their support department. Hope to hear from them soon.

  3. mxlab says:

    They have moved again and are now sending from abuse@createsend1.com. That domain is used by Campaign Monitor. We are in contact with these guys now to get their account cancelled.

  4. Hugh Hunter says:

    From: info@ncec-e-news.com
    Subject: Download New Skype Version 2010
    Date: 3 October 2010 7:00:45 AM
    To: hg.gr.hunter@clear.net.nz
    Reply-To: re-DA4-9FSP-2TQXHT-BYU1K@ncec-e-news.com

    Valued Skyper,

    On behalf of Skype Inc, wesincerely thank you for your as-always trust and supports. As a valued customer,you can enjoy ever more enhanced features from “Get More Out Of Skype” (learnmore at http://www.skype-voip-upgrade.com).

    What can you find in this upgrade?

    + Do amazing things for free:Voice and video calls to anyone else on Skype; Conference calls with three ormore people; Instant messaging, file transfer and screen sharing.
    + Call landlines and mobilesworldwide (for around 44 countries, and we are adding more soon).
    + Access WiFi hotspots withoutthe hassle.
    + Skype for iPhone: Now youcan make Skype calls over 3G.
    + Record all your calls:better than telephone quality.

    http://www.skype-voip-upgrade.com

    All you need to get up and running withSkype is…

    + A PC or Mac computer.
    + An internet connection(broadband is best).
    + A webcam to make videocalls.

    To learn more about thisupgrade, please go to Skype UpgradeCenter at:

    http://www.skype-voip-upgrade.com

    Let’s change the way we thinkof telecommunications.

    Thank you

    Cherie M Walford

    Skype Upgrade Center

    Copy rights Skype 2010 – AllRights Reserved
    Website: http://www.skype-voip-upgrade.com
    Want to unsubscribe or change your details?

  5. A student says:

    Just received the following. Interestingly they sent it to an email address I only use for NUS (http://www.nus.org.uk). Other students I know also seem to have received the spam so they have got our details from somewhere.

    ——– Original Message ——–
    Subject: Action Required : Upgrade Your New PDF Acrobat Reader
    Date: Sat, 16 Oct 2010 09:17:06 -0000
    From: Adobe Support
    Reply-To: Adobe Support
    To: *****

    ADOBE PDF READER SOFTWARE UPGRADE NOTIFICATION

    This is to remind that a new version of Adobe Acrobat Reader with enhanced features for viewing, creating, editing, printing and internet-sharing PDF documents has been released.

    To upgrade your application:

    + Go to http://www.adobe-software-upgrade.com
    + Get your options, download and upgrade.

    Thanks and best regards,
    John William

    Adobe Acrobat Reader Support
    Copy rights Adobe 2010 © All rights reserved
    1022 Marrinbird Rd | Merryton | CA | 91523 | USA

  6. Moe C says:

    Got an e-mail today, Oct 28/10. I’m in Canada.

    Subject: Action Required : Download Your New Adobe Acrobat Reader

    Received: from smtp.mail.click-synergy.com (smtp.mail.click-synergy.com [204.92.148.118])

    It opened to the page shown above. It was pretty obvious it wasn’t Adobe’s website.

  7. Blue Laptop Lover says:

    Is it just me or do these deceptive phishing/malware sites always have tacky content? Like that “NEW version” sunburst.

  8. Jennifer says:

    I just received this email today but its for the 2011 version. Reported to Acrobat not that that will do anything. But still alive

  9. Ilona Odekerken says:

    This is the email I received today,

    From:Skype News (support@official-skype-2011.net

    Dear valued Skype users,

    This is to notify that new VoIP and Conversation Recording addons have been released for Skype.

    Following are major new features:

    http://www.official-skype-2011.net

    – Talk more for free via Voice Over IP (VoIP)
    – Lower cost when connecting to landlines (much cheaper than Calling Card)
    – Record your conversation (better than telephone quality)
    – Instant messaging & file-sharing, video calls
    – Now available on PSP!

    To check your current version and upgrade, go to :

    http://www.official-skype-2011.net

    Skype has changed the way we think of telecommunications.

    Thank you and enjoy.

    Alex Anderson
    Skype Support Center

    i didnot trust it because Skype is a .com not a .net, and so I googled it to verify.

  10. Allison DiSalvo says:

    December 2, 2010 – Got this email today. Almost clicked on the link, then thought the better of it. Glad I didn’t! BTW, the header reads the originated email address as:

    Action Required : Upgrade New Adobe Acrobat Reader 2011 For Windows And Mac
    Thursday, December 2, 2010 8:01 AM

    ADOBE PDF READER SOFTWARE UPGRADE NOTIFICATION

    This is to remind that a new version of Adobe Acrobat Reader with enhanced features for viewing, creating, editing, printing and internet-sharing PDF documents has been released.

    To upgrade your application:

    + Go to http://www.adobe-2011-downloads.net
    + Get your options, download and upgrade.

    Thanks and best regards,
    John Watt
    Adobe Acrobat Reader Support

    Copy rights Adobe 2010 © All rights reserved

  11. Chase says:

    December 5th of 2010, I received e-mails from “support@2011-skype-download.org” and “newsletter@2011-adobe-acrobat.org” portraying to be “Skype” and “Adobe,”
    respectively. I was so grateful to find your web page with all of this extra information
    to help others not have their privacy invaded. It also helped me to know that I did
    the right thing by changing my password and e-mail address information AT “Skype”
    after I had requested assistance from this fake company portraying to be “Skype.”
    Thank you so very, very much!!
    (Chase)

  12. Cary says:

    I received an offer to update to ADOBE 11. When I oened it the site was written in Russian?

  13. Ray says:

    I beleive they have now moved on and use an email entitled “Action Required: Upgrade to the 2011 Antivirus” that says the following: –

    The folks at AVG Alternative wanted to wish you the best in 2011.

    We’re also taking this opportunity to introduce our newest 2011 version.

    Download the 2011 Version Here

    New 2011 features include:

    – Critical security updates
    – Easier user interface
    – Lighter on resources
    – Identity and online banking protection

    Upgrade to the 2011 Version Here

    Happy New Year,
    AVG Alternative
    Customer Support

    Everyone needs to be aware to protect themselves against fraud but it would help if the reputable AV companies posted warning to all regeistered companies of these sorts of events and perhaps worked together to try and stop this abuse of the Internet.

  14. Cloudy says:

    I received this in my inbox this morning and fortunately found your site before clicking. Worldwinner is a MSN online gaming site, and I couldn’t figure out why they wanted to sell me Adobe.

    Here is the header, for anyone who knows how to read it properly:

    Received: from mta.email.worldwinner.com (mta.email.worldwinner.com [66.231.84.70])
    by mtain-dc05.r1000.mx.aol.com (Internet Inbound) with ESMTP id BF1383800008B
    for ; Sun, 20 Mar 2011 07:12:50 -0400 (EDT)
    DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; s=200608; d=email.worldwinner.com;
    h=From:To:Subject:Date:List-Unsubscribe:MIME-Version:Reply-To:Message-ID:Content-Type; i=PlayerServices@email.worldwinner.com;
    bh=iFI4Fy//JL+uG9us+es0EzL5OgU=;
    b=P4ADQHy/b9qxipLNFpadItjR7ixh9PRHf8u/pJpm0YL6cG0EpHM8M+wbbfaqwEIp/RYf0rIs44OB
    m9fXRM9me7vMkhCnbpC1Fq6ht76W0ZAhO95OllAt6qOFaA3jhxAZr5bKlAZeAIq9LPDZTSkMdZLn
    5ERp+p1oebR8+rr57EA=
    DomainKey-Signature: a=rsa-sha1; c=nofws; q=dns; s=200608; d=email.worldwinner.com;
    b=MOjTECj5Tl4CJYMptwo7o1QhYC9gYfvw69SrI5OylAk9wL+LHpOnWZr/eXptwGGzQn2Wxk8zCLbX
    fdko6DcKHSdtV2grvcfWSh+7jQJgq7oqXURFL5R60X68+6WVDEfqMPGOxO98vYtSdC+AIL+lhnId
    gkoPEtM5Od0j3L1GSEQ=;
    Received: by mta.email.worldwinner.com (PowerMTA(TM) v3.5r15) id hgngj40ie1sg for ; Sun, 20 Mar 2011 05:12:42 -0600 (envelope-from )
    From: “WorldWinner”
    To:
    Subject: et more done, much faster, with Acrobat X PDF Reader. Upgrade Available Now
    Date: Sun, 20 Mar 2011 05:11:42 -0600
    List-Unsubscribe:
    MIME-Version: 1.0
    Reply-To: “WorldWinner”
    x-job: 74706_40698611
    Message-ID:
    Content-Type: multipart/alternative;
    boundary=”AGkBHlwNN35O=_?:”
    x-aol-global-disposition: G
    X-AOL-SCOLL-SCORE: 1:2:353636544:93952408
    X-AOL-SCOLL-URL_COUNT: 1
    X-AOL-SCOLL-AUTHENTICATION: mail_rly_antispam_dkim-m025.2 ; domain : email.worldwinner.com DKIM : pass
    x-aol-sid: 3039ac1d40854d85e132210e
    X-AOL-IP: 66.231.84.70
    X-AOL-SPF: domain : bounce.email.worldwinner.com SPF : pass

    This is a multi-part message in MIME format.

    –AGkBHlwNN35O=_?:
    Content-Type: text/plain;
    charset=”us-ascii”
    Content-Transfer-Encoding: 7bit

    GETTING MORE DONE AT WORK NOW COMES IN A CONVENIENT BOX

    See how Adobe Acrobat X Reader is a step above anything you’ve experienced before, so you can be even more productive.

    Upgrade now: http://click.email.worldwinner.com/?ju=fe1d1674756d037b7c1079&ls=fdfa17767466077b7214717d&m=fef71374726402&l=fe9e157377660c7d74&s=fe2c1071736101797d1670&jb=ffcf14&t=

    Just how much faster can you work with Adobe Acrobat PDF Reader
    software? Fast enough to stay on top of last-minute changes, connect
    with key decision makers, and share updates with co-workers.

    You’ll discover how easy it is to reuse content by exporting PDF files
    to Microsoft Word or Excel formats. And how quickly you can automate
    multi-step tasks with new, guided Actions. No wonder PC Magazine
    says, “There’s a lot to like in Acrobat X PDF Reader.” See for yourself at :

    http://click.email.worldwinner.com/?ju=fe1d1674756d037b7c1079&ls=fdfa17767466077b7214717d&m=fef71374726402&l=fe9e157377660c7d74&s=fe2c1071736101797d1670&jb=ffcf14&t=

    Copyright 2011 Adobe Systems Incorporated. All rights reserved.

    Adobe Systems Incorporated
    343 Preston Street
    Ottawa, ON K1S 1N4
    Canada
    Unsubscribe: http://click.email.worldwinner.com/?ju=fe251674756d037b7c1170&ls=fdfa17767466077b7214717d&m=fef71374726402&l=fe9e157377660c7d74&s=fe2c1071736101797d1670&jb=ffcf14&t=

    –AGkBHlwNN35O=_?:
    Content-Type: text/html;
    charset=”us-ascii”
    Content-Transfer-Encoding: 7bit

  15. Pingback: Una campaña de Phishing scam se enmascara como actualización de Adobe Reader. « Seguridad PCs

  16. Brian says:

    Looks like they are at it again. Can you confirm that the following email is the same hoax.

    Thanks

    B.

    The All New PDF 2011 is Here
    We are pleased to announce the newest PDF Reader for 2011.

    PDF 2011 will allow you to print, convert and edit PDF’s with ease.

    Simply visit the link below and enter your unique PDF download code:
    PDF Reader Code : 5013
    Download it Here

    Thank you for choosing us, the worldwide leader in PDF Reader solutions.

    John McGee
    Customer Care

    You are enrolled to dailynews_mar11 as cilbup101@yahoo.ca
    Safely take me off from dailynews_mar11 at any time.

    eDaily Feeds LTD – BCB Bachstrasse 1 – CH-9606 Butschwil – Switzerland

    ——————————————————————————–

    No virus found in this message.
    Checked by AVG – http://www.avg.com
    Version: 10.0.1325 / Virus Database: 1500/3607 – Release Date: 04/30/11

  17. Shlomo says:

    Looks like they are at it again, I beleive they have now moved on and use an email “reply@frommar11.com

    This time they didn’t mention “Adobe” the message read:

    Our Newest PDF Reader 10 is Now Available
    Dear PDF User,

    We are pleased to announce the newest PDF Reader 10 which will enable you to view, create, edit and print PDF documents.

    In addition to these increased features, the PDF reader now also contains critical security updates.

    As a special thank you, you’ll also receive our Office Pro package absolutely free.

    Simply visit the link below and enter your PDF reader code:

    PDF Reader Code : 5013
    Download the New 2011 Version Here

    Thank you for choosing us, the worldwide leader in PDF Reader solutions.

    Mike Robertson
    Customer Care

    Copyright PDF Reader 2011 – All rights reserved
    FREE Office Package

    FREE Office Package
    Word Processing
    HTML Publishing
    Macromedia Flash Export
    Built in PDF Export
    Java Database Interface
    MySQL Support
    Mozilla Address Book
    Customized Buttons
    Multilanguage Support
    .DOC Format Support

    You are enrolled to dailynews_mar11 as *****@****.com
    Safely take me off from dailynews_mar11 at any time.

    BM Media Feed – 2637 E Atlantic Blvd #17094- Pompano Beach, FL 33062

  18. Pingback: Google Picasa scam « mxlab – all about anti virus and anti spam

  19. Android Apk files says:

    Nice knowledge! I have been previously seeking something like this for a little bit now Many thanks!

  20. Peter Currie says:

    Is this another?

    START QUOTE

    The PDF format (Portable Document Format) is a global exchange document created by Adobe and is the most popular, reliable and recognized international standard for viewing and managing electronic documents in the world. Take advantage of robust tools for sharing information and electronic files. This version also offers enhanced performance with faster loading and zooming, expanded device compatibility, and extended application support for files attached to PDF documents.

    OPEN

    Open, display and print any PDF file created on any platform. These flexible features give you the ability to have total control on how you open and view your documents. !

    CREATE

    Collect data and combine it all into a PDF format. Put together professional looking digital paper Documents from word processors and excel sheets which can then be easily shared.

    EDIT

    Open, display and print any PDF file created on any platform. These flexible features give you the ability to have total control on how you open and view your documents

    END QUOTE

    this appears to come from ” Free Downlaod Adobe 2011

    Peter

    • mxlab says:

      I’m not having a look at the lay out of the message but according to the content this could be same threat as mentioned in our blog article.

  21. Mystika says:

    A new tactic: Now you can get it for FREE!!!!

    Your Tracking Number is 9435873
    Hide Details

    FROM:

    Customer Care

    TO:

    chrismys08@yahoo.com

    Message flagged
    Tuesday, October 18, 2011 5:00 AM

    Get Your New PDF 2012
    Dear Customers,

    We are thrilled to announce our newest PDF 2012 release.

    PDF 2012 will enable you to create, view, print, and convert PDF documents with ease.

    As a special thank you for your years of support, we’re including our Office Pro™ package absolutely free.

    Just visit the link below and enter your uniquely generated download code.

    Download Code:PD12
    Download it Here

    Again, we wanted to thank you for choosing us.

    Julia Ferguson
    Customer Care
    You are enrolled to mar11 as chrismys08@yahoo.com
    Safely take me off from mar11 at any time.

    BM Media Feed – 2637 E Atlantic Blvd #17094- Pompano Beach, FL 33062

    Reply to: Reply to reply@frommar11.com
    Send

  22. SethC says:

    Thanks very much for the heads-up!!

  23. Alex says:

    ***FYI***

    Sent: Mon Nov 28 19:43:14 2011
    Received: Mon Nov 28 19:53:28 2011
    From: Adobe Reader 2012
    To: ********
    Subject: Action Required : Adobe Acrobat Reader Software Upgrade Notification
    Part(s): Message Source Save As
    INTRODUCING UPGRADED ADOBE ACROBAT READER 2012

    Adobe is pleased to announce new version upgrades for Adobe Acrobat Reader

    http://barrington.myemailreports.com/link.php?M=3376636&N=56&uid=4401&L=3&F

    =T

    Advanced features include:

    – Collaborate across borders
    – Create rich, polished PDF files from any application that prints
    – Ensure visual fidelity
    – Encrypt and share PDF files more securely
    – Use the standard for document archival and exchange

    To upgrade and enhance your work productivity today, go to:

    http://barrington.myemailreports.com/link.php?M=3376636&N=56&uid=4401&L=3&F

    =T

    Start downloading the update right now and let us know what you think about
    it.

    We’re working on making Adobe Acrobat Reader better all the time !

    Copyright 2011 Adobe Systems Incorporated. All rights reserved.

    Adobe Systems Incorporated
    343 Preston Street
    Ottawa, ON K1S 1N4
    Canada

    To stop receiving these
    emails:

    http://barrington.myemailreports.com/unsubscribe.php?M=3376636&C=91598d6083bc340d5e59baee

    c280d528&L=73&N=56&uid=4401

  24. I just received the following

    “From: PDF Reader
    To: ptws3@yahoo.co.uk
    Sent: Tuesday, 6 December 2011, 20:00
    Subject: New PDF Reader for Windows – Now Available

    Hi,

    My name is Jenna McPherson, customer service rep at PDF 2012.

    Following your inquiry, below is your activation code for our PDF software.

    You PDF code is the following:

    482

    Enter Code Here

    Thank you,

    Jenna McPherson
    You are enrolled to sept10 as ptws3@yahoo.co.uk
    Safely take me off from sept10 at any time.

    BM Media Feed – 2637 E Atlantic Blvd #17094- Pompano Beach, FL 33062″

    ………..and having used google to verify came up with all your comments…..looks like the
    creator’s of this particular malicious virus are now using REPLY@FALL-SUPPORT1.COM
    Can anyone check on the validity of the address??? what’s at that address….???

    The e-mail community GLOBALLY should be able to create a SUPERVIRUS BREAKER THAT
    LEADS BACK TO THE ORIGINATOR…..TO PHYSICALLY HURT THEM…….##########

    Comments anyone??

  25. Pingback: Download New Maps for Google Earth scam « mxlab – all about anti virus and anti spam

  26. Maria says:

    Hello,
    Today I received an e-mail with the below text. Since it seams to be the same malicious company you referred to in the above notes, I would appreciate your opinion about this. It sounded interesting to me because in Argentina where I live this could be a good opportunity to get some money. But when I entered the site, I noticed that in order to join the company, they would charge a subscription fee to my credit card, which does not sound safe for me. Thanks to all of you for your oppinions. Maria
    _____________________________________________________________

    From: Home Income Secrets via m30.trackmediaone.com

    Get paid by drawing simple pictures &
    taking photos with your cell phone!

    See How Here: http://www.getpaidtodraw.com/?hop=gl001

    Right now there is a huge demand for pictures, drawings and images online, and a shortage of people supplying them.

    If you’re still looking for a way to legitimately work online in
    your spare time, then you need to check this out here

    These pictures could be pictures of your pets, fruit, trees or anything you take with your camera. Companies will buy the rights to use your pictures online and are willing to pay you a lot to do it!

    Track Media One – 2637 E Atlantic Blvd #17098 – Pompano Beach, FL 33062
    _________________________________________________________________________

    • mxlab says:

      > Since it seams to be the same malicious company you referred to in the above notes

      I do not believe that the message you received is from the same company that I refer to in my blog post. For me, based on the info of the web site and the payment web form that I saw, this is something different and not related with my blog post.

      Besides that, be careful if an offer sounds too good to be true. Noticed the web form you needed to fill in your name and email first? This is a first nice trick to get their hadns on your email address. Paying a certain amount upfront for getting a “drawing job”, well hm…., I’ll guess there are better ways to earn some money.

Follow

Get every new post delivered to your Inbox.

Join 314 other followers

%d bloggers like this: