We detected a massive phishing campaign targeting AmazonLocal customers. The email included a malicious link, based on our brief analysis shows that the malware is part of the Zeus/Zbot family.
When you get a suspicious email, try to hover the mouse over the link. If the target link is not known or it is different with the link text, then it could be a phishing! We highly recommends that you not click links in emails
Here’s some of text part of the email:
Good news, [email]!
Your AmazonLocal order is confirmed. Your order summary is listed below.
Visit Your Vouchers [link] page whenever you want to print your voucher or display it on your phone.
Thanks for being a customer,The AmazonLocal Team
Malicious links:
- hxxp://www.cookingdream.com/3nm4kpXT/index.html
- hxxp://papetarie-tipografie.ro/Rw1san5E/js.js
- hxxp://rezmobileapps.atspace.com/T886E6Sx/js.js
- hxxp://www.cclaymo.net/GJwajH74/js.js
- hxxp://50.116.36.175/h9gz8607yu.php?j=xgg4tkfj6iyfpvdd
