A spam mail masquerades as Firefox 8 . A spam mail send from a fake domain(not spoofed) ,note the domain address "fireefox.com" .All the links lead to 68.143.18.186.nw.nuvox.net/mozilla-firefox/plrja5f2 which in turn leads to a malicious executable with only 15/42 vendors detecting it at VirusTotal.
The Spam Mail:
From: Mozilla Firefox [mailto:firefox-update@plrja5f2.fireefox.com]
Sent: 22 November 2011 05:32
Subject: Introducing the new and improved Firefox 8,optimized for Facebook. 211.245.104.78
Facebook recommends the faster Firefox 8.
Can't see images? View on a mobile device
Facebook recommends that you upgrade to the
faster and smarter Firefox 8.
Get It Now
Introducing the new and improved Firefox 8, optimized for Facebook
• Browse faster than the previous version of Firefox.
• Easily organize and arrange your tabs into groups.
• Get on-the-go access to your saved Firefox settings across multiple computers.
• Access the new Facebook features as profile viewers and much more!
Get your free upgrade now.
Already upgraded? Thank you.
All your favorite stuff, all in one place. Make Facebook your home.
Visit Firefox on Facebook
Share:
Mozilla, Firefox, and the Firefox logo are trademarks or registered trademarks of Mozilla..
Update Marketing Preferences | Privacy Policy | Web Beacons in Email
RefID: sr-12012817