Malicious spam campaign regarding Adobe Acrobat 2010 PDF Reader and VOIP Addons for Skype
September 14, 2010 30 Comments
MX Lab reported earlier on regarding a malicious spam campaign regarding an offer to download and buy PDF Reader/Writer for Windows and Mac in the article “Emails offering PDF Reader 2010 lead to unsecure payment site“.
Yesterday, MX Lab intercepted more of these messages and when investigating the emails we found out that it was leading potential buyers to the same malicious web sites in order to steal credit card information.
The first campaign was names “Upgrade New Adobe Acrobat 2010 PDF Reader Alternative” and had the following email body:
ADOBE PDF READER SOFTWARE UPGRADE NOTIFICATION
This is to remind that a new version of Adobe Acrobat Reader with enhanced features for viewing, creating, editing, printing and internet-sharing PDF documents has been released.
To upgrade your application:
+ Go to hxxp://www.pdf-adobe-download.com
+ Get your options, download and upgrade.DOWNLOAD ADOBE ACROBAT READER
hxxp://www.pdf-adobe-download.com
Thanks and best regards,
John BrakesAdobe Acrobat Reader Support
Copy rights Adobe 2010 © All rights reserved
1005 Marrinbird Rd | Merryton | CA | 96523 | USA
==============================================
==============================================Unsubscribe ******@*****.co.uk from this list:
hxxp://pdf-adobe-upgrade.us2.list-manage.com/unsubscribe?u=e2c356e74c045c91e360cd969&id=dd23152aec&e=560b513fd2&c=772f545fad
When clicking the URL you will get the following web site:
The second campaign was named “Download VOIP Addons for Skype Free Talkse” and had the following email body:
SKYPE VoIP ADDONS UPDATES
This is to notify that new updates have been released for Skype. Following are major new features:
- Talk more for free via Voice Over IP (VoIP)
- Lower cost when connecting to landlines (much cheaper than Calling Card)
- Record your conversation (better than telephone quality)
- Instant messaging & file-sharing, video calls
- Now available on PSP!hxxp://www.skype-upgrade.com
To check and upgrade, go to Skype Updates Center or copy this link to your web browser:
hxxp://www.skype-upgrade.com
Skype has changed the way we think of telecommunications.
Thank you for choosing us.
With best regards,
Skype Support
3029 Maranta Rd, NY, 10310, USA
Copy rights Skype 2010 – All Rights Reserved
Website:http://www.skype-upgrade.com
==============================================Unsubscribe ****@****.co.uk from this list:
hxxp://pdf-adobe-upgrade.us2.list-manage.com/unsubscribe?u=e2c356e74c045c91e360cd969&id=dd23152aec&e=448e954c4e&c=5844889721
When clicking the URL you will get the following web site:
Both emails are not only leading to a malicious web site but are also quite misleading because both messages are signed by either Adobe Support or Skype Support departments and they appear to be comin gfrom Adobe or Skype based on the content.
Using the Download on the web site we got redirected to hxxps://secureonline.ru/. This time, we follow the Skype campaign because we haven’t covered it in detail but it is the same technique as in the past with the PDF Reader/Writer campaign.
In the previous PDF Reader/Writer campaign we noticed the abcense of an SSL connection but this time it is here. So we believe. There is a scripting that will masquerade the URL as safe by using SSL for secure payment but this is not entirely true.
From this point on the phishing begins by gathering your data.
Make a selection of the membership.
And here the credit cards details are gathered.
When investigating the messages further on, we found out that the spam campaigns where sent from a well known Email Service Provider MailChimp. We did found the abuse tracker code X-campaignid: mailchimpe2c356e74c045c91e360cd969.584***** so it was very easy to contact MailChimp and report the spam campaign.
We did got a polite email in return from MailChimp with the message “This account has been permanently suspended noting it violates our terms of use and CANSPAM. This is clearly spam and we’re glad you reached out to us about it.”.
It is of course good to see that companies like MailChimp really take an abuse report seriously.
So why isn’t Skype officially warning people about this?
They’ve moved on, of course. Can someone tell me if a message ID is in this one so I can complain? There’s code in this header I’m unfamilar with. When did service providers start putting in tracers?
X-Message-Delivery: Vj0xLjE7dXM9MDtsPTA7YT0wO0Q9MTtTQ0w9MA==
X-Message-Status: n
X-SID-PRA: Adobe PDF Support
X-AUTH-Result: NONE
X-Message-Info: JGTYoYF78jFROTkTLRImq+7qVq273o6c0VUHvRK3BB8nhBv99Buk5iyiFMxv8EnAW+ARhAmiAT+qchnzA4Dl+3e8cEXdCJ1n
Received: from eb18.emailsparkle.com ([216.240.181.27]) by SNT0-MC3-F2.Snt0.hotmail.com with Microsoft SMTPSVC(6.0.3790.4675);
Sun, 19 Sep 2010 18:32:18 -0700
Received: by eb18.emailsparkle.com (Postfix, from userid 0)
id CEB663241D8; Sun, 19 Sep 2010 18:32:17 -0700 (PDT)
To: ********
Subject: Upgrade New Adobe Acrobat 2010 PDF Reader Alternative
Message-ID:
DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=eb18.emailsparkle.com; i=@eb18.emailsparkle.com; q=dns/txt; s=gmmailerd; t=1284946275; h=From; bh=47DEQpj8HBSa+/TImW+5JCeuQeRkm5NMpJWZG3hSuFU=; l=0; b=LypcnyBiSZd1Yp9sdSwf9gjD2+pm04g3327k6id/sPn6l2bYaNDnQmrbNx6hVbhMZnzvBUsOgw1tn48WZ0gJHlp2Mz6PECo+ydNvDZRr1T6Z2uc4I5PvvwwAlPpHoBdm/CGBegQmDJaq5EnwzsxUaaXvw6W9BPJ199O/33m7G/U=
From: “Adobe PDF Support”
Mime-Version: 1.0
Content-Type: text/plain; charset=iso-8859-1
Content-Transfer-Encoding: quoted-printable
Date: Sun, 19 Sep 2010 18:32:17 -0700 (PDT)
Return-Path: returns@eb18.emailsparkle.com
X-OriginalArrivalTime: 20 Sep 2010 01:32:18.0608 (UTC) FILETIME=[A9ED0300:01CB5863]
We have seen this too with return@b.eb13.emailsparkle.com as from address. We visited http://www.emailsparkle.com and got a webpage with some text regarding message abuse and privacy policy and so on. At the end you can forward the email headers of the message in question.
A bit strange that there is no link to a mailing company but quite often, mailing companies also use different domains. Some of those mailing companies operate in what we call a “grey zone”. They send the same campaign over and over but from different domains to avoid blocked emails and spam complaints. You unsubscribe from one domain but the next you have emails from another domain, and in some cases with the same campaign content, so technically they are avoiding complaints this way.
Later on, we have seen messages from news-return-4-info=******.be@digioffice-mail.be with the following headers (note that emailsparkle.com is also present in the headers):
When visiting digioffice-mail.be you get a login screen but that’s basically it. This domain is registered to Mario Vleugels from West Technologies http://www.west-tec.com/, located in Herentals, Belgium.
The domain emailsparkle.com is owned by Dotster – http://www.dotster.com/ – and we already have contacted their support department. Hope to hear from them soon.
They have moved again and are now sending from abuse@createsend1.com. That domain is used by Campaign Monitor. We are in contact with these guys now to get their account cancelled.
From: info@ncec-e-news.com
Subject: Download New Skype Version 2010
Date: 3 October 2010 7:00:45 AM
To: hg.gr.hunter@clear.net.nz
Reply-To: re-DA4-9FSP-2TQXHT-BYU1K@ncec-e-news.com
Valued Skyper,
On behalf of Skype Inc, wesincerely thank you for your as-always trust and supports. As a valued customer,you can enjoy ever more enhanced features from “Get More Out Of Skype” (learnmore at http://www.skype-voip-upgrade.com).
What can you find in this upgrade?
+ Do amazing things for free:Voice and video calls to anyone else on Skype; Conference calls with three ormore people; Instant messaging, file transfer and screen sharing.
+ Call landlines and mobilesworldwide (for around 44 countries, and we are adding more soon).
+ Access WiFi hotspots withoutthe hassle.
+ Skype for iPhone: Now youcan make Skype calls over 3G.
+ Record all your calls:better than telephone quality.
http://www.skype-voip-upgrade.com
All you need to get up and running withSkype is…
+ A PC or Mac computer.
+ An internet connection(broadband is best).
+ A webcam to make videocalls.
To learn more about thisupgrade, please go to Skype UpgradeCenter at:
http://www.skype-voip-upgrade.com
Let’s change the way we thinkof telecommunications.
Thank you
Cherie M Walford
Skype Upgrade Center
Copy rights Skype 2010 – AllRights Reserved
Website: http://www.skype-voip-upgrade.com
Want to unsubscribe or change your details?
Just received the following. Interestingly they sent it to an email address I only use for NUS (http://www.nus.org.uk). Other students I know also seem to have received the spam so they have got our details from somewhere.
——– Original Message ——–
Subject: Action Required : Upgrade Your New PDF Acrobat Reader
Date: Sat, 16 Oct 2010 09:17:06 -0000
From: Adobe Support
Reply-To: Adobe Support
To: *****
ADOBE PDF READER SOFTWARE UPGRADE NOTIFICATION
This is to remind that a new version of Adobe Acrobat Reader with enhanced features for viewing, creating, editing, printing and internet-sharing PDF documents has been released.
To upgrade your application:
+ Go to http://www.adobe-software-upgrade.com
+ Get your options, download and upgrade.
Thanks and best regards,
John William
Adobe Acrobat Reader Support
Copy rights Adobe 2010 © All rights reserved
1022 Marrinbird Rd | Merryton | CA | 91523 | USA
Got an e-mail today, Oct 28/10. I’m in Canada.
Subject: Action Required : Download Your New Adobe Acrobat Reader
Received: from smtp.mail.click-synergy.com (smtp.mail.click-synergy.com [204.92.148.118])
It opened to the page shown above. It was pretty obvious it wasn’t Adobe’s website.
Is it just me or do these deceptive phishing/malware sites always have tacky content? Like that “NEW version” sunburst.
I just received this email today but its for the 2011 version. Reported to Acrobat not that that will do anything. But still alive
This is the email I received today,
From:Skype News (support@official-skype-2011.net
Dear valued Skype users,
This is to notify that new VoIP and Conversation Recording addons have been released for Skype.
Following are major new features:
http://www.official-skype-2011.net
- Talk more for free via Voice Over IP (VoIP)
- Lower cost when connecting to landlines (much cheaper than Calling Card)
- Record your conversation (better than telephone quality)
- Instant messaging & file-sharing, video calls
- Now available on PSP!
To check your current version and upgrade, go to :
http://www.official-skype-2011.net
Skype has changed the way we think of telecommunications.
Thank you and enjoy.
Alex Anderson
Skype Support Center
i didnot trust it because Skype is a .com not a .net, and so I googled it to verify.
December 2, 2010 – Got this email today. Almost clicked on the link, then thought the better of it. Glad I didn’t! BTW, the header reads the originated email address as:
Action Required : Upgrade New Adobe Acrobat Reader 2011 For Windows And Mac
Thursday, December 2, 2010 8:01 AM
ADOBE PDF READER SOFTWARE UPGRADE NOTIFICATION
This is to remind that a new version of Adobe Acrobat Reader with enhanced features for viewing, creating, editing, printing and internet-sharing PDF documents has been released.
To upgrade your application:
+ Go to http://www.adobe-2011-downloads.net
+ Get your options, download and upgrade.
Thanks and best regards,
John Watt
Adobe Acrobat Reader Support
Copy rights Adobe 2010 © All rights reserved
December 5th of 2010, I received e-mails from “support@2011-skype-download.org” and “newsletter@2011-adobe-acrobat.org” portraying to be “Skype” and “Adobe,”
respectively. I was so grateful to find your web page with all of this extra information
to help others not have their privacy invaded. It also helped me to know that I did
the right thing by changing my password and e-mail address information AT “Skype”
after I had requested assistance from this fake company portraying to be “Skype.”
Thank you so very, very much!!
(Chase)
I received an offer to update to ADOBE 11. When I oened it the site was written in Russian?
I beleive they have now moved on and use an email entitled “Action Required: Upgrade to the 2011 Antivirus” that says the following: -
The folks at AVG Alternative wanted to wish you the best in 2011.
We’re also taking this opportunity to introduce our newest 2011 version.
Download the 2011 Version Here
New 2011 features include:
- Critical security updates
- Easier user interface
- Lighter on resources
- Identity and online banking protection
Upgrade to the 2011 Version Here
Happy New Year,
AVG Alternative
Customer Support
Everyone needs to be aware to protect themselves against fraud but it would help if the reputable AV companies posted warning to all regeistered companies of these sorts of events and perhaps worked together to try and stop this abuse of the Internet.
I received this in my inbox this morning and fortunately found your site before clicking. Worldwinner is a MSN online gaming site, and I couldn’t figure out why they wanted to sell me Adobe.
Here is the header, for anyone who knows how to read it properly:
Received: from mta.email.worldwinner.com (mta.email.worldwinner.com [66.231.84.70])
by mtain-dc05.r1000.mx.aol.com (Internet Inbound) with ESMTP id BF1383800008B
for ; Sun, 20 Mar 2011 07:12:50 -0400 (EDT)
DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; s=200608; d=email.worldwinner.com;
h=From:To:Subject:Date:List-Unsubscribe:MIME-Version:Reply-To:Message-ID:Content-Type; i=PlayerServices@email.worldwinner.com;
bh=iFI4Fy//JL+uG9us+es0EzL5OgU=;
b=P4ADQHy/b9qxipLNFpadItjR7ixh9PRHf8u/pJpm0YL6cG0EpHM8M+wbbfaqwEIp/RYf0rIs44OB
m9fXRM9me7vMkhCnbpC1Fq6ht76W0ZAhO95OllAt6qOFaA3jhxAZr5bKlAZeAIq9LPDZTSkMdZLn
5ERp+p1oebR8+rr57EA=
DomainKey-Signature: a=rsa-sha1; c=nofws; q=dns; s=200608; d=email.worldwinner.com;
b=MOjTECj5Tl4CJYMptwo7o1QhYC9gYfvw69SrI5OylAk9wL+LHpOnWZr/eXptwGGzQn2Wxk8zCLbX
fdko6DcKHSdtV2grvcfWSh+7jQJgq7oqXURFL5R60X68+6WVDEfqMPGOxO98vYtSdC+AIL+lhnId
gkoPEtM5Od0j3L1GSEQ=;
Received: by mta.email.worldwinner.com (PowerMTA(TM) v3.5r15) id hgngj40ie1sg for ; Sun, 20 Mar 2011 05:12:42 -0600 (envelope-from )
From: “WorldWinner”
To:
Subject: et more done, much faster, with Acrobat X PDF Reader. Upgrade Available Now
Date: Sun, 20 Mar 2011 05:11:42 -0600
List-Unsubscribe:
MIME-Version: 1.0
Reply-To: “WorldWinner”
x-job: 74706_40698611
Message-ID:
Content-Type: multipart/alternative;
boundary=”AGkBHlwNN35O=_?:”
x-aol-global-disposition: G
X-AOL-SCOLL-SCORE: 1:2:353636544:93952408
X-AOL-SCOLL-URL_COUNT: 1
X-AOL-SCOLL-AUTHENTICATION: mail_rly_antispam_dkim-m025.2 ; domain : email.worldwinner.com DKIM : pass
x-aol-sid: 3039ac1d40854d85e132210e
X-AOL-IP: 66.231.84.70
X-AOL-SPF: domain : bounce.email.worldwinner.com SPF : pass
This is a multi-part message in MIME format.
–AGkBHlwNN35O=_?:
Content-Type: text/plain;
charset=”us-ascii”
Content-Transfer-Encoding: 7bit
GETTING MORE DONE AT WORK NOW COMES IN A CONVENIENT BOX
See how Adobe Acrobat X Reader is a step above anything you’ve experienced before, so you can be even more productive.
Upgrade now: http://click.email.worldwinner.com/?ju=fe1d1674756d037b7c1079&ls=fdfa17767466077b7214717d&m=fef71374726402&l=fe9e157377660c7d74&s=fe2c1071736101797d1670&jb=ffcf14&t=
Just how much faster can you work with Adobe Acrobat PDF Reader
software? Fast enough to stay on top of last-minute changes, connect
with key decision makers, and share updates with co-workers.
You’ll discover how easy it is to reuse content by exporting PDF files
to Microsoft Word or Excel formats. And how quickly you can automate
multi-step tasks with new, guided Actions. No wonder PC Magazine
says, “There’s a lot to like in Acrobat X PDF Reader.” See for yourself at :
http://click.email.worldwinner.com/?ju=fe1d1674756d037b7c1079&ls=fdfa17767466077b7214717d&m=fef71374726402&l=fe9e157377660c7d74&s=fe2c1071736101797d1670&jb=ffcf14&t=
Copyright 2011 Adobe Systems Incorporated. All rights reserved.
Adobe Systems Incorporated
343 Preston Street
Ottawa, ON K1S 1N4
Canada
Unsubscribe: http://click.email.worldwinner.com/?ju=fe251674756d037b7c1170&ls=fdfa17767466077b7214717d&m=fef71374726402&l=fe9e157377660c7d74&s=fe2c1071736101797d1670&jb=ffcf14&t=
–AGkBHlwNN35O=_?:
Content-Type: text/html;
charset=”us-ascii”
Content-Transfer-Encoding: 7bit
Pingback: Una campaña de Phishing scam se enmascara como actualización de Adobe Reader. « Seguridad PCs
Looks like they are at it again. Can you confirm that the following email is the same hoax.
Thanks
B.
The All New PDF 2011 is Here
We are pleased to announce the newest PDF Reader for 2011.
PDF 2011 will allow you to print, convert and edit PDF’s with ease.
Simply visit the link below and enter your unique PDF download code:
PDF Reader Code : 5013
Download it Here
Thank you for choosing us, the worldwide leader in PDF Reader solutions.
John McGee
Customer Care
You are enrolled to dailynews_mar11 as cilbup101@yahoo.ca
Safely take me off from dailynews_mar11 at any time.
eDaily Feeds LTD – BCB Bachstrasse 1 – CH-9606 Butschwil – Switzerland
——————————————————————————–
No virus found in this message.
Checked by AVG – http://www.avg.com
Version: 10.0.1325 / Virus Database: 1500/3607 – Release Date: 04/30/11
Looks like they are at it again, I beleive they have now moved on and use an email “reply@frommar11.com
This time they didn’t mention “Adobe” the message read:
Our Newest PDF Reader 10 is Now Available
Dear PDF User,
We are pleased to announce the newest PDF Reader 10 which will enable you to view, create, edit and print PDF documents.
In addition to these increased features, the PDF reader now also contains critical security updates.
As a special thank you, you’ll also receive our Office Pro package absolutely free.
Simply visit the link below and enter your PDF reader code:
PDF Reader Code : 5013
Download the New 2011 Version Here
Thank you for choosing us, the worldwide leader in PDF Reader solutions.
Mike Robertson
Customer Care
Copyright PDF Reader 2011 – All rights reserved
FREE Office Package
FREE Office Package
Word Processing
HTML Publishing
Macromedia Flash Export
Built in PDF Export
Java Database Interface
MySQL Support
Mozilla Address Book
Customized Buttons
Multilanguage Support
.DOC Format Support
You are enrolled to dailynews_mar11 as *****@****.com
Safely take me off from dailynews_mar11 at any time.
BM Media Feed – 2637 E Atlantic Blvd #17094- Pompano Beach, FL 33062
Pingback: Google Picasa scam « mxlab – all about anti virus and anti spam
Nice knowledge! I have been previously seeking something like this for a little bit now Many thanks!
Is this another?
START QUOTE
The PDF format (Portable Document Format) is a global exchange document created by Adobe and is the most popular, reliable and recognized international standard for viewing and managing electronic documents in the world. Take advantage of robust tools for sharing information and electronic files. This version also offers enhanced performance with faster loading and zooming, expanded device compatibility, and extended application support for files attached to PDF documents.
OPEN
Open, display and print any PDF file created on any platform. These flexible features give you the ability to have total control on how you open and view your documents. !
CREATE
Collect data and combine it all into a PDF format. Put together professional looking digital paper Documents from word processors and excel sheets which can then be easily shared.
EDIT
Open, display and print any PDF file created on any platform. These flexible features give you the ability to have total control on how you open and view your documents
END QUOTE
this appears to come from ” Free Downlaod Adobe 2011
Peter
I’m not having a look at the lay out of the message but according to the content this could be same threat as mentioned in our blog article.
A new tactic: Now you can get it for FREE!!!!
Your Tracking Number is 9435873
Hide Details
FROM:
Customer Care
TO:
chrismys08@yahoo.com
Message flagged
Tuesday, October 18, 2011 5:00 AM
Get Your New PDF 2012
Dear Customers,
We are thrilled to announce our newest PDF 2012 release.
PDF 2012 will enable you to create, view, print, and convert PDF documents with ease.
As a special thank you for your years of support, we’re including our Office Pro™ package absolutely free.
Just visit the link below and enter your uniquely generated download code.
Download Code:PD12
Download it Here
Again, we wanted to thank you for choosing us.
Julia Ferguson
Customer Care
You are enrolled to mar11 as chrismys08@yahoo.com
Safely take me off from mar11 at any time.
BM Media Feed – 2637 E Atlantic Blvd #17094- Pompano Beach, FL 33062
Reply to: Reply to reply@frommar11.com
Send
Thanks very much for the heads-up!!
***FYI***
Sent: Mon Nov 28 19:43:14 2011
Received: Mon Nov 28 19:53:28 2011
From: Adobe Reader 2012
To: ********
Subject: Action Required : Adobe Acrobat Reader Software Upgrade Notification
Part(s): Message Source Save As
INTRODUCING UPGRADED ADOBE ACROBAT READER 2012
Adobe is pleased to announce new version upgrades for Adobe Acrobat Reader
http://barrington.myemailreports.com/link.php?M=3376636&N=56&uid=4401&L=3&F
=T
Advanced features include:
- Collaborate across borders
- Create rich, polished PDF files from any application that prints
- Ensure visual fidelity
- Encrypt and share PDF files more securely
- Use the standard for document archival and exchange
To upgrade and enhance your work productivity today, go to:
http://barrington.myemailreports.com/link.php?M=3376636&N=56&uid=4401&L=3&F
=T
Start downloading the update right now and let us know what you think about
it.
We’re working on making Adobe Acrobat Reader better all the time !
Copyright 2011 Adobe Systems Incorporated. All rights reserved.
Adobe Systems Incorporated
343 Preston Street
Ottawa, ON K1S 1N4
Canada
To stop receiving these
emails:
http://barrington.myemailreports.com/unsubscribe.php?M=3376636&C=91598d6083bc340d5e59baee
c280d528&L=73&N=56&uid=4401
I just received the following
“From: PDF Reader
To: ptws3@yahoo.co.uk
Sent: Tuesday, 6 December 2011, 20:00
Subject: New PDF Reader for Windows – Now Available
Hi,
My name is Jenna McPherson, customer service rep at PDF 2012.
Following your inquiry, below is your activation code for our PDF software.
You PDF code is the following:
482
Enter Code Here
Thank you,
Jenna McPherson
You are enrolled to sept10 as ptws3@yahoo.co.uk
Safely take me off from sept10 at any time.
BM Media Feed – 2637 E Atlantic Blvd #17094- Pompano Beach, FL 33062″
………..and having used google to verify came up with all your comments…..looks like the
creator’s of this particular malicious virus are now using REPLY@FALL-SUPPORT1.COM
Can anyone check on the validity of the address??? what’s at that address….???
The e-mail community GLOBALLY should be able to create a SUPERVIRUS BREAKER THAT
LEADS BACK TO THE ORIGINATOR…..TO PHYSICALLY HURT THEM…….##########
Comments anyone??
Pingback: Download New Maps for Google Earth scam « mxlab – all about anti virus and anti spam
Hello,
Today I received an e-mail with the below text. Since it seams to be the same malicious company you referred to in the above notes, I would appreciate your opinion about this. It sounded interesting to me because in Argentina where I live this could be a good opportunity to get some money. But when I entered the site, I noticed that in order to join the company, they would charge a subscription fee to my credit card, which does not sound safe for me. Thanks to all of you for your oppinions. Maria
_____________________________________________________________
From: Home Income Secrets via m30.trackmediaone.com
Get paid by drawing simple pictures &
taking photos with your cell phone!
See How Here: http://www.getpaidtodraw.com/?hop=gl001
Right now there is a huge demand for pictures, drawings and images online, and a shortage of people supplying them.
If you’re still looking for a way to legitimately work online in
your spare time, then you need to check this out here
These pictures could be pictures of your pets, fruit, trees or anything you take with your camera. Companies will buy the rights to use your pictures online and are willing to pay you a lot to do it!
Track Media One – 2637 E Atlantic Blvd #17098 – Pompano Beach, FL 33062
_________________________________________________________________________
> Since it seams to be the same malicious company you referred to in the above notes
I do not believe that the message you received is from the same company that I refer to in my blog post. For me, based on the info of the web site and the payment web form that I saw, this is something different and not related with my blog post.
Besides that, be careful if an offer sounds too good to be true. Noticed the web form you needed to fill in your name and email first? This is a first nice trick to get their hadns on your email address. Paying a certain amount upfront for getting a “drawing job”, well hm…., I’ll guess there are better ways to earn some money.