Symantec Blogs: Security ResponseSyndicate content

Kelly Conley | February 14th, 2008
0 comments

It's election year in the United States,everyone must be aware of that by now. We've just observed a Trojanbeing spammed out utilizing a candidate's name, Hillary Clinton, asbait. The email asks you to click a link to download an interview withher. The email circulating has the following subject line:

Subject: Hillary Clinton Full Video !!!

The body of the email looks like this:

The link looks to be coming from http://www.google.com/pagead/iclk?sa=3Dl&ai=3DRwGGv&num=3D96249&a=durl=http://canotajetrilly.com/[REMOVED]/rdown.php?PNDcx"=id=3D

Looking closer, we see the actual link is:

http://canotajetrilly.com/[REMOVED]/rdown...

Kelly Conley | February 5th, 2008
0 comments

The February State of Spam Reporthighlights an interesting trend in the shift of spam moving from NorthAmerica to EMEA. The percentage of spam originating from EMEA hassurpassed that of North America, which represents a significant shiftin where the bulk of the world’s spam is “supposedly” sent from.

This trend has been observed for the past three months with aculmination in January of approximately 44% of all spam email noworiginating from Europe, versus 35.1% from North America. But is thisspam mail really originating in Europe? Although it appears that waythe very nature of spam distribution makes it difficult to accuratelypinpoint the true geographic origin the sender. Spammers often takeadvantage of tricks that allow them to mask their real location andbypass DNS block lists.

Why the...