Click to enlarge |
According to the press release, the webpage hosting the piece of malware – dailydotnews.com - is simple, yet efficiently designed, with a top banner, a simple picture masquerading as a YouTube player and three lines of text detailing on US' operation in Iran. This approach has been used on a large scale, as the spammer relies on a catchy heading and a link to the piece of malware in order to fuel users' curiosity and trick them into downloading the piece of malware.
Bitdefender Antispam Analyst, Andra Miloiu said, "The new spam wave relies on computer users' curiosity regarding the conflict between the United States and Iran. They are apparently redirected to a fake news website, where they are shown a larger, inciting description that accompanies a movie player. However, the alleged flash movie is an image depicting a movie player; when clicked, the image would reveal users the 'Save image as...' option."
