Fake ‘You have made an Ebay purchase’ themed emails lead to client-side exploits and malware


By Dancho Danchev

Over the past 24 hours, cybercriminals have launched yet another massive spam campaign, this time impersonating both eBay and PayPal, in an attempt to trick their users into clicking on the client-side exploits and malware serving links found in the malicious emails.

More details:

Continue reading

Spamvertised ‘Your Ebay funds are cleared’ themed emails lead to Black Hole exploit kit


By Dancho Danchev

Cybercriminals are currently mass mailing millions of emails impersonating eBay and PayPal in an attempt to trick end and corporate users into clicking on the malicious links found in the emails. Upon clicking on any of them, user are exposed to the client-side exploits served by the Black Hole exploit kit.

More details:

Continue reading

Spamvertised ‘Your Paypal Ebay.com payment’ emails serving client-side exploits and malware


By Dancho Danchev

Remember the ‘Your Amazon.com order confirmation’ client-side exploits and malware serving campaign which I profiled earlier this week?

It appears that the gang behind it is back with another campaign, this time impersonating PayPal. For the time being, another round consisting of millions of malicious emails is circulating in the wild, enticing end and corporate users into clicking on malicious links found in the emails.

More details:

Continue reading