FYI...
New Storm tactic: Medical spam sites
- http://www.websense.com/securitylabs...php?BlogID=170
Jan 29 2008 - "...Storm worm has changed spamming tactics. Spam sent by infected hosts contain links of the format:
http ://(IP address)/(short random directory name)
These links redirect users to medical spam sites, but the links are still infected at the root level (e.g. http ://IP address/). The redirects help these medical spam sites attempt to evade spam filters..."
- http://blog.trendmicro.com/storm-now...-bad-medicine/
January 31, 2008
(Screenshot available at both URLs above.)