Avira Techblog: Speed ticket from NY Police via email

No, it is actually a pretty interesting spam email which I received.

The emails pretend to come from New York State ”Department of Motor Vehicles” and informs the recipient that he/she violated the speed limit .

In order to see more details, a form hosted on a website should be accessed.

The interesting part in this email consist in the back-end of the scam.

The website behind the link  contains a piece of JavaScript code which is obfuscated in its ASCII form.

The deobfuscated code looks like in the next picture:

Basically, the browser will be redirected via an invisible IFRAME to a Russian website (which is now offline) and probably tries to download some malware.

All Avira products detect the obfuscated code as ’JS/iFrame.NV [virus]‘.

We advise our readers to never respond to such emails in any way. Speeding tickets come exclusively via regular post and never by email.

Sorin Mustaca

Data Security Expert

via Avira – TechBlog http://techblog.avira.com/2012/08/23/speed-ticket-from-ny-police-via-email/en/


© Copyright 2012 Sorin Mustaca, All rights Reserved. Written For: Sorin Mustaca on Cybersecurity


Check www.endpoint-cybersecurity.com for seeing the consulting services we offer.

Visit www.itsecuritynews.info for latest security news in English
Besuchen Sie de.itsecuritynews.info für IT Sicherheits News auf Deutsch

Related Posts

What are functional and non functional requirements and why both matter

In software engineering (and Systems Engineering), a functional requirement defines a function of a system or its component. A function is described as a set of inputs, the behavior, and outputs (see also software). Functional requirements may be calculations, technical details, data manipulation and processing and other specific functionality that define what a system is supposed to accomplish. Behavioral requirements describing all the cases where […]

Emails containing fake invoices from Zalando and Deutsche Bahn distribute malware

We wrote before about the smart methods of fooling users to do things (execute files) which they would not normally do. Two weeks ago we’ve seen a mass mailing in the German language containing malicious payload pretending to be invoices from Apple and Plus.de. Cybercriminals are sending again personalized emails in the German language pretending […]

About the APR’s Memory pools which seem to cause memory leaks

Resources: http://en.wikipedia.org/wiki/Apache_Portable_Runtime http://en.wikipedia.org/wiki/Memory_pool http://dev.ariel-networks.com/apr/apr-tutorial/html/apr-tutorial-3.html http://svnbook.red-bean.com/en/1.1/ch08s05.html The APR pools are some big tables which contain references to consecutive memory areas which are used by the application. Once the application releases such an area, the pool marks the memory area as available, but it doesn’t give it back to the OS. Let’s take an example which better […]

Discover more from Sorin Mustaca on Cybersecurity

Subscribe now to keep reading and get access to the full archive.

Continue reading