New BlackHole email campaign found

Share this article:

Attackers are delivering the popular crimeware kit BlackHole through “urgent” messages designed to look like emails from financial institutions and well-known companies like LinkedIn, Facebook and American Airlines. 

The emails include links to compromised sites where vulnerabilities in various operating systems, including Android and Windows, are exploited, according to Paras Gupta, a McAfee researcher who published a blog post Wednesday on the spam campaigns.

Notifications purporting to be about bills, pending wire transfers, completed orders and unread messages on social networking sites are among the email subject lines used to lure victims.

The malicious links often end in “/random_word.html” or “/random_word.php,” and the emails' unsubscribe links are usually missing or have been replaced with malicious URLs, Gupta said.

Share this article:
You must be a registered member of SC Magazine to post a comment.
close

Next Article in News

Sign up to our newsletters

TOP COMMENTS

More in News

ISSA tackles workforce gap with career lifecycle program

ISSA tackles workforce gap with career lifecycle program ...

On Thursday, the group launched its Cybersecurity Career Lifecycle (CSCL) program.

Amplification DDoS attacks most popular, according to Symantec

Amplification DDoS attacks most popular, according to Symantec

The company noted in a whitepaper released on Tuesday that Domain Name Server amplification attacks have increased 183 percent between January and August.

Court shutters NY co. selling security software with "no value"

A federal court shut down Pairsys at the request of the Federal Trade Commission.