Spam in fake LinkedIn messages
January 19, 2012 2 Comments
MX Lab, http://www.mxlab.eu, has noticed a large spam campaign on behalf of the Canadian Family Pharmacy in fake LinkedIn messages.
The messages come the spoofed email address <member@linkedin.com> with the authors like:
Fenella Macdonald via LinkedIn <member@linkedin.com> Catriona Bailey via LinkedIn <member@linkedin.com> Susan Jones via LinkedIn <member@linkedin.com> ....
Subjects in use:
Can i place your photo on my site?
Can i place your photo on our facebook page?
Can i place your information on our web page?
Can i place your video on our web site?
Can i place your video on my facebook page?
Can i place your contacts on our twitter page?
…..
Example of the email:
The URL in the message point to different web hosts and pages with an redirect HTML:
<html><head><title>Buy Viagra Online – Online Pharmacy</title><style type=”text/css”> a { font-size: 24pt; } </style><script type=”text/javascript”>var a = “hxxp://viagralevitratestosterone.com”;window.location = a;</script></head><body><center><h1>#1 Online Pharmacy</h1><br>Online DrugStore<br><a href=”hxxp://viagralevitratestosterone.com”>Buy Viagra Online</a></center></body></html>
In return, the redirect points to hxxp://viagralevitratestosterone.com.
