'Chameleon' Spam Campaign Employs Randomized Email Headers

guest · Sep 26, 2019

'Chameleon' Spam Campaign Employs Randomized Email Headers
September 26, 2019
https://www.securityweek.com/chameleon-spam-campaign-employs-randomized-email-headers

Emails sent as part of this campaign, which Trustwave security researchers refer to as Chameleon, originated from all around the world (a list of source IP addresses has been posted online).

The security researchers also discovered that many of the lure URLs used in this spam campaign were linking to compromised WordPress sites, which the attackers likely used as part of their infrastructure.

“At this stage, we have not pinpointed the spamming malware behind these campaigns,” Trustwave says.
URLs embedded in the spam messages pointed to pages hosting the same JavaScript content, which then redirected users to other destinations, before getting them to the final landing page “greatexpert.su,” which hosts a shady “Canadian Pharmacy” site.
Some of the spam links were observed leading to fake Bitcoin purchase sites.

“This sophisticated and transient infrastructure powered by a powerful versatile and distributed spamming botnet enables the scammer to launch any campaign with minimum effort. As of now the nature of the spam is centered around pill spam and fake Bitcoin spam, however, this could potentially shift to serve phishing or even malware,” Trustwave concludes.
Click to expand...

Trustwave: Tracking the Chameleon Spam Campaign

Log in or Sign up

'Chameleon' Spam Campaign Employs Randomized Email Headers

guest Guest

Log in or Sign up

'Chameleon' Spam Campaign Employs Randomized Email Headers

guest Guest

Useful Searches