| Home | The Book | Training | Events | Tools | Stats |
July 22, 2008
The Amero?Storm-like malware lures are flowing now with subjects and message bodies referring to an imaginary currency to replace the (sagging) U.S. Dollar, Canadian Dollar, and Mexican Peso. They call it the Amero (get it, an American Euro?).
The landing page has a picture of a supposed 20 Amero coin:
You have to admit that these crooks sometimes go to a fair amount of effort to make their clickable lures appealing to the unwary.
In addition to telling visitors to click on the false site image to download amero.exe, the page also includes a hidden iframe element, which loads the same obfuscated JavaScript (via ind.php) discussed here.
These guys keep pushing the Outrageous meter into the red zone with their email messages and phony sites (case in point, one that just arrived—Subject: Police open fire on elderly in Iowa). Pretty soon, you won't be able to believe anything that arrives in an unsolicited email. Heh heh.
Posted on July 22, 2008 at 08:34 AM