Spammers have never balked at using Web forms as a way of sending out spam messages--anything to expose their wares. Basically, they will look for a public Web server that allows them to provide feedback or information to a certain company. These Web forms require them to fill up certain fields with information such as names, phone numbers, email addresses, and--wait for it--even spam messages. Even worse, spammers can also send image spam and/or infected files if the Web form ...

A few hours ago (22 July 2008, 03:41 a.m. PST), our EMEA threat analysts were able to catch the following UPS spam samples from our honeypots. Apparently, the spam run we saw last week (discussed in the blog entry Trojans Deliver) is just beginning to pick up. Here are fresh new UPS spam: Banking perhaps on a previous observation from the earlier UPS post: The B2C (business-to-consumer) parcel industry is set to be the next big thing in Europe, says market research ...

Ideas on a world financial crisis seem to be on everyone’s minds these days, even malware authors’. In a recent spamming operation, the Storm gang takes advantage of users’ fears of global economic problems. Localizing the attack to citizens of the still hypothetical North American Currency Union, these spammed email messages promise more information on the present world financial situation as well as a supposed glimpse into plans regarding the implementation of amero – the currency of the said union. Here's a ...

Florabel Baetiong of the Trend Micro Content Security (CS) team reports of a type of fake email message circulating in the Net that contains a YouTube video link sharing notification, which supposedly comes from someone who wants to share an adult video with the recipient. Below is a screenshot of the said email notification: Figure 1: Fake YouTube email notification The said email message is written in Portuguese. Once recipients click on the link, they are directed to a site where they ...

At first glance, these spam emails look like the usual spam, but closer inspection proves otherwise: According to our Antispam Engineers, "This is tricky, it's just like the usual replica-image spam, but looking into the details, there’s no image at all!" Spammer’s tactical capabilities seems to have reached new artistic heights. By spanning HTML rows and columns together, an "image" comes out as TD and TR tags come into play, being extensively used to create spam without inserting any character. It's ...