Malware Pushers Abuse Gmail Invitation Template

[Peaches]

Malware Pushers Abuse Gmail Invitation Template

Rogue Google Mail invitations direct users to malicious websites

We're seeing quite the uptick in spoofed 'Your Friend has invited you to open a Google mail account' emails lately," security researchers from OnyMyEmail, a Michigan-based anti-spam solutions vendor, warn. The fake messages look almost identical to the real Gmail invitations put out by Google's system.

The researchers believe that the names and addresses used in the Form field of the spam emails are copied from the address book of users who's computers have already been compromised. In addition, the messages are probably sent from the same infected machines, which are now part of a botnet.

All hyperlinks included in the rogue emails, like the ones for "Sign up" or "Learn more" lead to a malicious website. The landing page loads an Web exploit toolkit which targets vulnerabilities in outdated versions of popular software like Adobe Reader, Flash Player or Java.

Story - http://news.softpedi...te-150295.shtml