The spamming campaign that has hit us full force is pushing the file get_flash_update.exe. Most AV’s at this point have detected this file so hopefully it shouldn’t cause much havoc. I wanted to post the emails we’ve received and the domains that are hosting this malware.
VirusTotal shows 31/35 detection and you can click the link for more details. Of course this file is available in our repository in pnuemo-malware/Classified/Trj-Exchanger.S.zip.
Warning: These sites are still live as of 7/29 10:22a PST. Proceed at your own risk!
hxxp://ankaraspor.com.tr/default.html
hxxp://cit-inc.net/default.html
hxxp://grupoestudio.com/default.html
hxxp://www.dianagraf.es/default.html
hxxp://venhuis.de/default.html
hxxp://grupoestudio.com/default.html
hxxp://ebberov.homepage.dk/default.html
hxxp://madosma.com/default.html
hxxp://warinsa.com/default.html
hxxp://www.czareksu.pl/default.html
hxxp://heimerpara.de/default.html
Read more for the email subjects and bodies we’ve received.
Subject: Steve Jobs admits recurrence of pancreatic cancer
Body: Invest and get 100% returns
Subject: So you think you can dance
Body: Boy eats cats daily
Subject: Explosion rock Israel, Gulf war imminent
Body: Bear attack kills 3 in Atlanta zoo
Subject: Top tips for an accessible home
Body: Bear attack kills 3 in Atlanta zoo
Subject: Arnold Schwarzenegger quits as Governer
Body: Girl bites brother’s finger off
Subject: You are living in the worst city
Body: citibank files for bankruptcy protection
Subject: Girl kicks brother to death
Body: Win a free trip to Vegas
Subject: Sex change operation went wrong
Body: Obama denies wrongdoing in Presidential debate
Subject: Swedish princess slaps town florist
Body: Suicide blasts in Iraq kill hundreds
Subject: Win a free trip to Vegas
Body: Italy charges Google for espionage
Subject: Kidnapper at large in NY, dangerous
Body: Afghan rebels kill 102 US soldiers
Subject: Afghan rebels kill 102 US soldiers
Body: Man kills wife in accidental gas explosion
Subject: Shark attack off Australia, 2 dead
Body: Swedish princess slaps town florist
Subject: Fire threatens Hollywood
Body: Bullies face huge health risk
Subject: Girl gang rapes fellow male classmate
Body: Unknown person stabs Christian Bale
Subject: Google charged by European Union for espionage
Body: Incredible college parties
Subject: Killer dogs tear intruder apart
Body: Shia LaBeouf refused bail after arrest
Subject: Girl bites brother’s finger off
Body: Incredible college parties
I received some of these also. One more website for the list.
hxxp://asb-ov-nauen.de/default.html
From: kaled [renrocnu1984@joneskeller.com] Sent: Tue 7/29/2008 7:55 PM
Subject: Bill Gates to make Microsoft return
Win a free trip to Vegas hxxp://asb-ov-nauen.de/default.html