MP3 spam - the new kid on the block
Posted on 18 October 2007.
Spammers are back with a new trick, this time round sending messages
with MP3 attachments that contain the latest pump-and-dump stock scams.
One sample identified this morning by GFI, was a heavily distorted
30-second MP3 file. A synthetic female voice was used to promote a
particular stock. This voice is distorted to avoid filtering approaches
based on the file signature.
Once again, spammers are taking advantage of the fact that the MP3
format is one of the most common in use today, another attempt at social
engineering.
----------------------------------
Check out http://www.invariantsystems.com for utilities for Declude,
Imail, mxGuard, and ORF. IMail/Declude Overflow Queue Monitoring,
SURBL/URI integration, MRTG Integration, and Log Parsers.
Randy Armbrecht wrote:
we just saw a Spam come in with lovedrug.mp3
Randy A.
Global Web Solutions, Inc.
----- Original Message ----- From: "Gary Steiner"
<[EMAIL PROTECTED]>
To: <[email protected]>
Sent: Wednesday, October 17, 2007 9:10 PM
Subject: [Declude.JunkMail] new virus/spam as mp3?
I just started receiving something new that so far is being caught as
spam. They are messages with no subject, no body, but have a file
attachment that is Content-Type: audio/mpeg. So far I've seen it as
elvis.mp3
beatles.mp3
hurricanechris.mp3
I sent it through VirusTotal but didn't get any hits.
Anyone else seen this or heard what it is?
Thanks,
Gary
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail". The archives can be found
at http://www.mail-archive.com.
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail". The archives can be found
at http://www.mail-archive.com.
--
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail". The archives can be found
at http://www.mail-archive.com.
