Before one could get hired, spammers made sure you remember your school days. And they do this by way of celebrating Classmates’ Day, as seen on the spreading message below:
Clicking on the continue link takes you to the following legitimate-looking Classmates.com Web page:
After which, a download dialog box appears, prompting you to download a file to be able to see the video:
In true spammer-malware author fashion, the downloaded file is an executable, which Trend Micro detects as a TSPY_PAPRAS variant.
This post will be updated as more information on the analysis of the downloaded file comes in.