Monday, March 17, 2014

lesmessagersducoeur.be

I have received a spam email with this text:


Google New notification. View notification With many thanks, Google Service. This notification was sent to spammmmm@xxxx.com; Don't want occasional updates about Google activity and friend suggestions? Change what notification Google sends you. Google Inc., 1600 Amphitheatre Pkwy, Mountain View, CA 94043 USA
And a link to:

http:// www. lesmessagersducoeur.be/ hatefulness.pl

"hatefulness.pl" seems to be a perl script.

If you enter in that page the code you see is:


pcs1="\x30";ctlkd2="\x68\x74\x74\x70\x3A\x2F\x2F\x6D\x79\x63\x61\x6E\x61\x64\x61\x70\x69\x6C\x6C\x73\x2E\x63\x6F\x6D";setTimeout("\x77\x69\x6E\x64\x6F\x77\x2E\x74\x6F\x70\x2E\x6C\x6F\x63\x61\x74\x69\x6F\x6E\x2E\x68\x72\x65\x66\x3D\x63\x74\x6C\x6B\x64\x32\x3B",pcs1);



Be careful visiting this site because some hacker has founded a vulnerabity. The web site is built with Serif WebPlus X6 (14.0.2.025)