Always nice when the spammers are so forthcoming to send their latest crud directly to our SANS ISC honeypot account. The current incarnation
came from
which kinda figures, Softlayer is among the cloud computing providers whose "get a virtual server FREE for one month" is an offering that scammers can't resist. The "Marriott" email said:
Clicking on the link results in a rather unimaginative website, hosted on http://lucky-survey.com-hu3[dot]info, shown on the picture below. It doesn't (seem to - as far as I could tell) push any malware, but asks a couple of dumb questions, and then offers a prize. Ahem. Sort of a prize: Somewhere along the way, it seems like the connection to "Marriott" got lost. Which is maybe all the better... |
Daniel 385 Posts ISC Handler Sep 1st 2015 |
Thread locked Subscribe |
Sep 1st 2015 6 years ago |
Sign Up for Free or Log In to start participating in the conversation!