SANS ISC: Fake IE 7 update spam doing the rounds

• SANS Site Network
  • Current Site
  • SANS Internet Storm Center
  • Other SANS Sites Help
  • Graduate Degree Programs
  • Security Training
  • Security Certification
  • Security Awareness Training
  • Penetration Testing
  • Industrial Control Systems
  • Cyber Defense Foundations
  • DFIR
  • Software Security
  • Government OnSite Training

SANS ISC InfoSec Forums

A number of readers have alerted us to a round of IE7 update spam being sent out. The e-mails read:

You are receiving this e-mail because you subscribed to MSN Featured Offers.
Microsoft respects your privacy. If you do not wish to receive this MSN Featured
Offers e-mail, please click the "Unsubscribe" link below. This will not unsubscribe
you from e-mail communications from third-party advertisers that may appear in MSN
Feature Offers. This shall not constitute an offer by MSN. MSN shall not be
responsible or liable for the advertisers' content nor any of the goods or service
advertised. Prices and item availability subject to change without notice.

Well, true enough Microsoft will not be responsible as its not from them! (Shock / Horror).

For the sample we received, VT has good coverage:

http://www.virustotal.com/analisis/18b97fb3bc30251051a8542a90401b6f