Twitter, Google and the social networking site Hi5 are being abused in an email campaign to distribute the Prolaco worm. The campaigns have the following characteristics. Note that the email addresses are spoofed.
The malware is known as Worm.Win32.Prolaco.gen (Sunbelt), Worm:Win32/Prolaco.gen!C (Microsoft) and Worm.Win32.Prolaco (Ikarus).
Twitter
From: <invitations@twitter.com>
Subject: Your friend invited you to twitter!
Attachment: Invitation Card.zip (approx 348 kB)
Body [...]
Twitter, Google and Hi5 being abused in Prolaco worm distribution
Twitter accounts abused by spammers
MX Lab detected a spam campaign where Twitter is being abused by spammers to promote online drug stores.
The campaign is sent from random spoofed email addresses and has similar subjects like:
7U1 An amazing selection of brand name medications, all for incredibly low prices!
2F9 Looking for Hytrin? 7N8
6W3 Looking for Abilify?
5Z2 Looking for Fosamax?
4G5 Do you [...]
MX Lab on Twitter
Follow the MX Lab tweets on Twitter at http://twitter.com/mxlab/. Stay up to date with the latest news regarding email security in general.
