Spammers are stepping up their use of Shockwave Flash file redirects to avoid detection.