Avast WEBforum

Other => Viruses and worms => Topic started by: mchain on November 03, 2012, 12:00:29 PM

Title: New Threat or spam? mailbot@yahoo.com
Post by: mchain on November 03, 2012, 12:00:29 PM
New! mailbot@yahoo.com:  http://urlquery.net/report.php?id=82688 (http://urlquery.net/report.php?id=82688)

Got this in yahoo webmail box a moment ago.

Posted as [no subject] in subject line. 

urlquery.net notes other email addresses have been scanned by other users of this site.  Captured window of site shows no information or data in it whatsoever. 

Blank pages are sometimes what an user will see whilst malicious exploit engines are running in the background and/or installing malware and exploits such as Blachole kit.

Marked as spam and deleted it after investigating.  Never have seen this one before.

Note:  If the Y! logo preceding the sender is not there (Yahoo!) it is not genuine.  That was the case here.
Title: Re: New Threat or spam? mailbot@yahoo.com
Post by: polonus on November 03, 2012, 01:21:50 PM
Hi mchain,

This scam has been with us since 2010, read: http://voices.yahoo.com/yahoo-alert-scam-5358265.html (link author Marie Marie), malvertiser mail...

polonus
Title: Re: New Threat or spam? mailbot@yahoo.com
Post by: mchain on November 03, 2012, 01:49:51 PM
Pol,

Thanks for the link.  Will be useful for other users here for whom their curiosity is piqued by this.

Never heard or saw before.  Was suspicious, and glad I never looked inside (opened the email).  I am certain I did not miss anything, as the urlquery.net scan showed.  If one is on the internet long enough, you will be targeted.

Remember, if the Y! logo is not before the sender (Yahoo!), it is not genuine, even if it says it is from Yahoo!.