Threat Level: green Handler on Duty: Xavier Mertens

SANS ISC: Lots of Black Friday SPAM & Phishing - SANS Internet Storm Center SANS ISC InfoSec Forums


Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!
Lots of Black Friday SPAM & Phishing

Likely every reader out there, their friends and family, even their pets with email accounts, have received Black Friday SPAM or phishing attempts today. Our own Dr. J sent the handlers an Amazon sample for One Click Black Friday Rewards. Of course, that one click goes no where near Amazon and directs you to the likes of Black Fiday (yes, it's misspelled) at hXXp://www.jasbuyersnet.com/cadillac/umbered/sedatest/styes/coleuses/unterrified.htm. Can't speak to the payload there, don't bother, just use it at as ammo for heightened awareness and safe shopping on line during these holidays, and...well, all the time. Be careful out there. :-)

Cheers and happy holidays.

 

Russ McRee

183 Posts
ISC Handler
In one of the spam messages that I received, clicking the embedded hyperlink eventually landed on the _real_ AMAZON.COM web-site, but with an "Associate_ID" string in the URL.

So, if I were do actually buy something via AMAZON, would that "associate" receive a few cents, or some "credit" within AMAZON?

Sneaky way to generate "credit" by exploiting gullible people who "click" first and think later.
Anonymous

Sign Up for Free or Log In to start participating in the conversation!