Over the past several weeks, just as the the 2007-08 NFL regular season comes into full swing, the contents of email boxes everywhere started being bombarded with yet another NFL-driven social engineering vector. And, of course, given that this is employing social engineering vectors, a slightly more inviting version of the spammed malware email has been introduced. In the latter edition, the involved miscreants have got themselves an actual domain name in the included link, rather than an IP address, and replaced most of the text with some nifty graphics, raising the bar from quite obviously malicious to just obviously malicious. Both messages profess to provide unsuspecting users a free game tracking system.

At Arbor Networks.

[ Read more ]