Re: [funsec] nasty infection from following link if anyone is interested

[Juha-Matti Laurio <juha-matti.laurio () netti fi>]

Your modifications doesn't prevent your link to be clickable in all mail clients.
Please use methods
http : // and/or
archive1329101302 . heddasq

next time...

Juha-Matti

RandallM [randallm () fidmail com] kirjoitti: 
> one of my sales people fell for a "someone posted a picture of you" emails.
>
> Got a real nasty that came with, according to malwarebytes, "Pawnd.bot
> and Backdoor.bot".
> Havent checked it out yet but thought I would share it.
>
>
> The link is this:
> (REMOVETHISFIRSThttp://archive1329101302.heddasq.eu/photo-hosting/)
>
> -- 
> been great, thanks
> a.k.a System

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/