Monday, December 13, 2010

blogger spammer messages on facebook

they send a private message on facebook saying

I got u a surprise xxx.huikalurocigi.blogspot.com

that page has a javascript

< script src= 'xxp://fotoshare-dknc.com/url.js'

the source of that script reads
url = "hxxp://surprise-2mki.co.cc"


this url has a single hyper-link saying

Download photoalbum

this link source code shows an exe file (possibly malware/spyware called photo.exe

photo.exe " >Download photoalbum

No comments:

Post a Comment