New Zhelatin tactics

[Humpty]

Last Wednesday we blogged about the changing tactics being used by the Zhelatin/Storm Worm gang and their "eCard for you" ? themed malware spam.

 

The tactics are changing again. The malicious websites haven't changed; they still spread malicious msdataaccess.exe files.

 

However, the e-mails no longer talk about ecards. Instead, they look like these two:

F-Secure Article

[JDPower]

And changed again:

A few times over the last week we've posted on how the e-mails used by the Zhelatin/Storm gang have changed, so we weren't too surprised to see them change once again. This time though, they look very different as they talk about "you" having signed up for different services such as MP3 World or Internet Dating.

http://www.f-secure.com/weblog/archives/ar...7.html#00001255