Video Screencast Help
Security Response

Shanghai World Expo 2010 is a Spammer’s Delight

Created: 15 Jun 2010 21:37:42 GMT • Updated: 23 Jan 2014 18:26:50 GMT
Vivian Ho's picture
0 0 Votes
Login to vote

Spammers are known to be crowd chasers. And so it goes that social networking forums, sports events, and major news-generating events always seem to catch the spammers’ attention. In line with this trait, spammers are now targeting global expos. With around 70 to 100 million visitors expected to turn up at the Shanghai World Expo 2010 this year, spammers couldn't have asked for a better time to make their presence felt.
 
Spammers are using the Shanghai expo in their subject lines and email messages to deliver fake promotions, sell products, and offer various services. Symantec has been monitoring several different variations of spam types in the campaign.

Sample 1:
Spammers include an expo event subject line to attract hits. In the body, there is a meds promotion URL right in the center and a bogus MSN subscription note at the bottom.

From: <Details Removed>
Subject: 200,000 flood Shanghai Expo preview achroous

 

Sample 2:
Electronics promotion found to be using randomized From and Subject lines. This sample also fits the dictionary/domain attack profile.

From: <Details Removed>
Subject: Re: Genuine electronics  Y

 

Sample 3:
In this sample, a Chinese management consulting spammer promoted a training course with free World Expo tickets in order to attract more customers.

From: <Details Removed> 企业管理咨询有限公司 <<Details Removed>>
Subject: 报名赠送世博门票

Translation:
From: <Details Removed>  Management Consulting Co. Ltd.
<<Details Removed> >
Subject: Sign up and get World expo ticket for free

 

Translation:

To celebrate the company’s 7th anniversary
And World Expo
We are giving away World Expo ticket for free when you sign up to any business course.
There are more than a thousand courses to choose from.
We can make a special course schedule if you need an internal training program for your company.

Consulting phone number: [Details Removed]

[Details Removed] Management Consulting Co.,Ltd

Website: [Details Removed]

Address: [Details Removed]
Contact number:[Details Removed]
email:[Details Removed]

=======================

Note: My thanks to blog contributors Danyang Wang and Esther Liu.