Jack Davis <[email protected]> wrote:

>I see another heading that I avoided opening; royal07  nq:
>This is maybe the third time I've seen such, or similar, recently. 
>Anyone else?

Yeah, it's just a link to a hacked web site. The hacked web site
contains simply a redirect to the spammer's *real* web site, which
naturally is a site that tries to load malware when you visit (unless
you have antivirus on your computer).

How it works is this:
Spammer sets up web site with malware loader on host in Czech Republic
(where the host will ignore complaints)
Then spammer hacks a legit web site somewhere else and sets up a
redirect to his malware site.
Then spammer pumps out spam with link to the hacked (and not blocked
by antivirus) site.

I've notified the host of the hacked redirect site. I've not bothered
with the Czech site hosting the malware because they don't have an
abuse address and history shows they'd ignore any complaints anyway.
(Romania is another place that seems to host attack sites happily.)

-- 
PDML Pentax-Discuss Mail List
[email protected]
http://pdml.net/mailman/listinfo/pdml_pdml.net
to UNSUBSCRIBE from the PDML, please visit the link directly above and follow 
the directions.

Reply via email to