Sophos

16 July 2007 06:41 GMT

Your private and confidential message is attached

In the past few weeks the new “PDF spam” trick was used exclusively in “pump-n-dump” scams. And just like it was with “image spam” last year, it was only a matter of time before the PDF format was adopted by other spam genres…

Today’s catch was the “medical” PDF spam using the following social engineering technique:

From: Administrator <...@....> Subject: New mail - Private  Your private and confidential message is attached. (emp)  ----------------------------------------------------------------------

The “confidential message” attached turned out to be a PDF document featuring the following:

Viagra© & Cialis©
*Joint Corporate Reminder of Re-Order.

http://www.######.com

As a valued customer/client we would like to remind you that
your current dosage may be running low or expired.

We have a discount offer for existing individuals under this plan.
If you would like to take advantage of this, then please
visit our website and a substantial deduction in your normal
costs will be granted for all future orders. We thank you for
your continued support with our product.

*Note: Be cautious of generic prescription offers out there.
Only buy from our website with the genuine Viagra© & Cialis©
Trademark.

http://www.######.com

Viagra© & Cialis© 2007

Dmitry Samosseiko, SophosLabs Canada