
The fake site you visit has some "re-direct" code:

If you do actually go to the site, it'll look something like this, followed by an auto-download of
the "flash-player" needed:

Submitting the exe file to VirusTotal reveals, surprise surprise... it's not a flash-player:

The email is currently being detected as: Email.Malware.Sanesecurity.07061801
No comments:
Post a Comment