By Dancho Danchev

Opportunistic pharmaceutical scammers are currently spamvertising tens of thousands of bogus emails impersonating Facebook’s Notification System in an attempt to trick users into clicking on the links, supposedly coming from a trusted source. Once users click on the links found in the fake emails, they’re exposed to counterfeit pharmaceutical items available for purchase without a prescription.

More details:

Sample screenshot of the spamvertised email:


Counterfeit pharmaceutical URL: hxxp:// – – Email:

Sample screenshot of the landing URL:


Known to have responded to the same IP, are the following fraudulent domains/subdomains:

Earning revenue while participating in a pharmaceutical affiliate network, the scammers behind these campaigns have a proven record of impersonating legitimate and trusted brands in an attempt to trick users into clicking on the links. The ultimate question – is someone actually buying these counterfeit drugs? The answer is surprisingly, yes, with the U.S accounting for 72% of pharmaceutical orders, according to research published last year.

Users are advised to avoid interacting with such Web sites, and to consider reporting them as fraudulent immediately.

You can find more about Dancho Danchev at his LinkedIn ProfileYou can also follow him on Twitter.

Blog Staff

About the Author

Blog Staff

The Webroot blog offers expert insights and analysis into the latest cybersecurity trends. Whether you’re a home or business user, we’re dedicated to giving you the awareness and knowledge needed to stay ahead of today’s cyber threats.

Share This