« An Alternative to the Long 419 Sob Story | Main | Attack of the Bogus LinkedIn Invitations »

August 06, 2010

Here's a scam message that will ultimately lead to pwnership of quite a few PCs on the scammer's email address database:

Subject: Thank you for your EXPRESS payment

***PLEASE DO NOT REPLY TO THIS MESSAGE***

Dear [removed -- recipient's email address],

Thank you for your online payment of $500.00. Your payment will be applied on Fri, 6 Aug 2010 08:35:18 -0800

Remember you can manage your account online, view statements and pay your bill at www.mycardcare.com/express.

The hidden link beneath the visible URL is to a highjacked web site where the file contains a redirector (complete with affiliate ID so that the spam originator gets credit for your visit) to a site claiming that your PC is infected with viruses. That page also has tons of silent-loading nastiness embedded within.

Especially in these economically difficult times, receiving news of some large, unauthorized payment can really get the blood boiling, sending your mouse racing to the link to find out what's going on. If you have found this posting because you are performing some due diligence prior to clicking the link, then pat yourself on the back for being a smart user...and DON'T click that link, no matter how much virus protection you have installed.