The controversial sex scandal involving Italian Prime Minister Silvio Berlusconi has recently become target for spammers. The spam mail is crafted in Italian and targeted at the Italians who were concerned over the issue. The spam mail comes with a “Youtube” link which actually came from youtorube.com, and not from the real youtube.com. To view the said video, user must download and install a video codec first. Upon clicking the link, it will download a malicious file named wmpcodec.exe. The spam mail is already detected in TMASE Full Pattern 6726, and all URLs are now blocked by Trend Micro.
Figure 1. Notice the extra letters in the sender domain
Comments