The same gang that has been sending out malicious links in emails looking like
greeting cards or 4th of July greetings have now added a new look and feel of the email. Now they can also look like malware, trojan or spyware alerts from Customer Support Center and the email talks about abnormal activity that has been seen from your IP address. All you have to do is to click on the link and run the file to fix it or else your account will get blocked. Needless to say the downloaded file is malicious.
Again the file is downloaded using an IP address and not a DNS name but his time around though they've tried to disguise with a text hyperlink. We detect the downloaded file as
Packed.Win32.Tibs.ab. On 09/07/07 At 06:52 AM
More...
Linear Mode
