SPAM REVIEW

The Spam Omelette #41

Welcome to a new issue of our Spam Omelette, the weekly review focused on the latest trends in the spam industry. Before moving forward with the material, please take a look at our testing and map generation methodology, as explained in our first issue.

Normal
0

false
false
false

EN-US
X-NONE
X-NONE

MicrosoftInternetExplorer4

/* Style Definitions */
table.MsoNormalTable
{mso-style-name:”Table Normal”;
mso-tstyle-rowband-size:0;
mso-tstyle-colband-size:0;
mso-style-noshow:yes;
mso-style-priority:99;
mso-style-qformat:yes;
mso-style-parent:””;
mso-padding-alt:0in 5.4pt 0in 5.4pt;
mso-para-margin:0in;
mso-para-margin-bottom:.0001pt;
mso-pagination:widow-orphan;
font-size:10.0pt;
font-family:”Calibri”,”sans-serif”;}

Spam Omelette 41

1. Get
your DIPLOMA – Now!

First spotted on the spam map two weeks ago – after a
prolonged period of absence – diploma spam started ramping up. This week, the
word DIPLOMA hits the first place in the spam top and is mostly encountered in
spam messages advertising easy ways of getting an academic certificate in
exchange of a specific amount of money. While the offer may sound tempting, the
so-called diploma has no value as it is issued by an institution with no
educational credibility.

Degree Spam (Diploma)

 

2. CLICK
me if you dare

Ranking second in BitDefender’s spam top, the word CLICK has
been identified in messages advertising sexual enhancements. These spam mails
come with inciting subjects such as “I’d date you”, or “We’re in trouble” in
order to lure the user into opening them. The message features a centered image
with the current offering and multiple links, all leading to the same website.

Click Spam

 

3. Everything
has a PRICE

The word PRICE ranks third in this week’s issue of the Spam
Omelette. However, the vast majority of spam messages abusing the word are not
promotional messages related to knock-off products, but rather
prescription-based sexual enhancements such as Viagra and Levitra. The links
embedded in such messages lead the user to a website belonging to world’s
number one spammer Canadian Pharmacy.

Price Spam - Canadian Pharmaxy

 

4. WEIGHT loss lies

Ranking fourth in our weekly spam top, the word WEIGHT has
been identified in messages advertising natural supplements for weight loss.
Please note that these messages usually try to sell pills that have not passed
the FDA approval and may not deliver what they promise (or worse, impact on
users’ health).

weight spam - Dorp a few pounds in 5 days

 

5. PLEASE come and visit us!

The word PLEASE concludes this week’s issue of the Spam
Omelette and has been identified by BitDefender’s spam analysts in messages
advertising Canadian Pharmacy products. Disguised as digital copies of the
Playboy magazine, the messages contain a central image with the current
offering and multiple links that take the user to the Canadian Pharmacy
website.

Playboy e-magazine spam

About the author

Bogdan BOTEZATU

Bogdan Botezatu is living his second childhood at Bitdefender as senior e-threat analyst. When he is not documenting sophisticated strains of malware or writing removal tools, he teaches extreme sports such as surfing the web without protection or rodeo with wild Trojan horses. He believes that most things in life can be beat with strong heuristics and that antimalware research is like working for a secret agency: you need to stay focused at all times, but you get all the glory when you catch the bad guys.