US$1 Tickets to Brazil Come with Hidden Costs
- Monday, November 23, 2009, 4:28
- Threat Research
- 1 views
Users who are currently planning to go or return to Brazil, especially with the holidays coming up, should watch out for a recent spam run. Spammed messages fashioned to look like an email from a Brazilian airline are offering users tickets to Brazil for just US$1.
Here is a rough translation of the text in the spam:
Promotion Voegol the $1.00 is back, buy tickets or return for all of Brazil to only $1.00. Visit our online service through the website: http://www.voegol.com.br/Atendimento/ and mention code: VG1R After that, wait for contact from a clerk, and make the purchase. Further promotion visit:
The spam run seems to take advantage of the promotions currently being offered by the said Brazilian airline. As enticing as the offer is, however, the links in the said email leads to nowhere near cheap tickets. The link leads to a URL that downloads TROJ_DLOADR.APX. TROJ_DLOADR.APX then connects to other URLs to download TSPY_BANKER.NGN. TSPY_BANKER variants have been known to take special interest on Brazil. They are known to steal banking information specifically related to Brazilian banks.
Users are advised to ignore similar spam they receive and instead check out the airline’s website for promos and other offers. On the other hand, Trend Micro users are protected from this attack through the Smart Protection Network.
Post from: TrendLabs | Malware Blog - by Trend MicroUS$1 Tickets to Brazil Come with Hidden Costs
...Read the original story
