Malicious HTML in E-Mail Increases

[Peaches]

Malicious HTML in E-Mail Increases

Spammers are seeding e-mail with new HTML-based attacks, security firm warns.

Spammers have suddenly cranked up the use of malicious HTML file attachments in recent days, according to security company Barracuda Networks.

Artwork: Chip TaylorUsing a number of search engine optimization-driven subject lines, the latest campaign tries to get recipients to click on "harmless" HTML attachments which launches an obfuscated Javascript attack that sends users to a variety of websites peddling everything from bogus CODECS to pharmacy.

One in particular, a standard advertisement for fake antivirus software, installs a back door -- even if the browser is closed so by the time the HTML file has been clicked it is already too late. (See also "How to Spot an E-Mail Scam.")

Full story - http://www.pcworld.c..._increases.html