Shields Up! Amazon brandjacked in new malcious spam campaign

A new spam campaign is using Amazon to deliver malware. The emails look just like a notification from Amazon and tell the recipient that in order to continue their Amazon Delivers newletter subscriptions they must click on a link to verify their email address. The link leads to a malicious URL that pushes malware designed to look for and take advantage of several different security flaws in everything from Adobe Acrobat to IE.

Fortunately it’s easy to spot the fake messages. Real emails from Amazon will address you buy your name while the fake ones use either your email address or “Dear User”. Another easy way to spot fake emails is to let your cursor hover over the links. The real address it points to will be revealed. Just be careful not to click!

Read [ZDnet]