{"id":6757,"date":"2012-04-03T12:07:00","date_gmt":"2012-04-03T19:07:00","guid":{"rendered":"http:\/\/blog.webroot.com\/?p=6757"},"modified":"2018-01-30T13:03:18","modified_gmt":"2018-01-30T20:03:18","slug":"spamvertised-us-airways-themed-emails-serving-client-side-exploits-and-malware","status":"publish","type":"post","link":"https://www.webroot.com/blog/2012\/04\/03\/spamvertised-us-airways-themed-emails-serving-client-side-exploits-and-malware\/","title":{"rendered":"Spamvertised ‘US Airways’ themed emails serving client-side exploits and malware"},"content":{"rendered":"

Cybercriminals are currently spamvertising yet another social-engineering driven malicious email campaign, this time impersonating U.S Airways<\/a><\/strong>.<\/p>\n

\"\"<\/a><\/p>\n

Upon clicking on the malicious links found in the emails, end and corporate users are exposed to client-side exploits courtesy of the BlackHole web malware exploitation kit.<\/p>\n

More details:<\/p>\n

<\/p>\n

Spamvertised subjects:\u00a0<\/strong>US Airways online check-in,\u00a0US Airways reservation confirmation,\u00a0Confirm your US airways online reservation,\u00a0US Airways online check-in confirmation<\/em><\/p>\n

Message:\u00a0<\/strong>You can check in from 24 hours and up to 60 minutes before your flight (2 hours if you’re flying internationally). After that, all you have to do is print your boarding pass and go to the gate.\u00a0Confirmation code: 250462 Check-in online: Online reservation details<\/em><\/p>\n

Spamvertised malicious URL:\u00a0<\/strong>hxxp:\/\/goldapnews.pl\/zh6jPwn1\/index.html<\/em><\/p>\n

Once the users click on the malicious links found in the email, an obfuscated javascript code will attempt to load from multiple compromised web servers in an attempt to redirect the users to the client-side exploits serving URL courtesy of the BlackHole web malware exploitation kit.<\/p>\n

\"\"<\/a><\/p>\n

Go through related posts:<\/p>\n