[nsp-sec] enom security POC?

[Chris Morrow]

On Mon, 27 Oct 2008, Nicholas Ianelli wrote:

> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
> Oh hell no, this guy is also involved in a domain that was pushing the
> malicious AntiVirus 2009:
>
> Chris Morrow wrote:
>> ----------- nsp-security Confidential --------
>>
>>
>> looks like enom is being phished :(
>>
>> <snip spam content>
>> For access your account follow this link - http://www.enom.com.sys82.net
>> </snip spam content>
>>
>> something about 'we are doing maintenence...' spam sample available upon
>> request.

I have samples from today starting at:
as701.net_20081027_111.gz

11:10am UTC ...

2736 samples actually... weee! 'prolific'.

-chris