Apr/13
2010

Published: 4-13-2010
Last Updated: 2010-04-13 13:35:41 UTC
by Johannes Ullrich (Version: 1)

This is more of a reminder then "breaking news". But it may be worth while to include this in an awareness newsletter or similar presentation to keep your staff up to date on current social engineering malware. Our reader, Andy, sent us this e-mail he received. The domain name in the link has been modified. We of course had similar malware in the past claiming to be court documents or intellectual property violation notices.


----------------
Subject: Notice: Contract terms breached.

5 April, 2010


Hello,

You are hereby put on notice that as of 7/1/2010 you are in breach of our contract dated 3/12/2007. The nature of said breach is: False Advertising, Breach of Contract, Bad faith Breach of Contract, Fraud and Deceit. It is our desire to inform you of the foregoing and afford you the opportunity to cure said breach. You may in any event be held responsible for all damages arising from said breach.

To view a copy of the complaint please visit our company website: (REMOVED). Please use the CASE ID located at the end of the document to find the copy of the complaint.

You have until 10th of May 2010 to cure said breach, after which we will be forced to pursue further legal action.


Regards,
Jim Karter

CASE ID: 4322524

**Symmetric Engineering Group has had a client email us about this attack and received the same email. DO NOT click the link that is in the email!

13 comments
Comment from: web hosting [Visitor] · http://www.buildwebsite.com/
web hostingThank you on the current social engineering malware. A good blog.
04/25/10 @ 10:26
Comment from: transport osobowy Niemcy [Visitor] · http://www.opos-trans.pl
transport osobowy NiemcyI was bored until i've found your blog, interesting articles
06/15/10 @ 17:42
Comment from: demon tattoo designs [Visitor] · http://tattoos4everybody.com
demon tattoo designsGood work ! Keep us posting, you are good writer.
06/16/10 @ 06:57
xrumer 5.0 warezGreat info, thanks for useful post. I am waiting for more
06/30/10 @ 16:51
Comment from: cars [Visitor] · http://tghaiskmcksoxl.co.uk
carshey i was searching for that in google
08/19/10 @ 10:37
Comment from: admin [Member] Email
adminGlad you found it on our blog! Stay tuned for the latest IT news and daily postings!
08/20/10 @ 14:15
Comment from: iphone for free [Visitor] · http://www.iphonefourfree.co.uk
iphone for freeHi, Thanks for the opportunity to submit here as it surpasses phoning! I am really stunned at the actual contribution other writers are generating with your site and wish to contribute too when i can. I go along with the preceding poster and anticipate to check back occasionally.
08/22/10 @ 17:21
Comment from: how to download from youtube [Visitor] · http://www.buzzfeed.com/ufcfan/how-to-download-from-youtube-1aqh
how to download from youtubeGood work, keep us posting, you are good writer.
08/27/10 @ 16:32
Comment from: Optimization engine [Visitor] · http://logicpath.com
Optimization engineI would like even more people would generate weblogs this way which are actually fun you just read. With all the nonsense flying about on the net, it's extraordinary you just read a web page like this instead
08/30/10 @ 14:33
Comment from: stop snoring [Visitor] · http://how-to-stop-snoring.com
stop snoringHiya, Thx for your update for your page since i've been waiting around a little bit. Are planning to remedy the web page theme that you are using and revise it? Thanks
09/10/10 @ 07:51
Golf TipsI appreciate the time you have taken to post this, thank you
09/13/10 @ 06:43
Comment from: bet on ufc [Visitor] · http://betonufc.info
bet on ufcYou made some good points here.Keep us posting. What template do you use in your site
10/10/10 @ 17:14
Comment from: chicksloveblackmeat [Visitor] · http://www.youtube.com/watch?v=CQjcMUbrij8
chicksloveblackmeatInteresting article i totally agree with the other comments. Keep writing
10/13/10 @ 19:03
Leave a comment

Your email address will not be revealed on this site.

Your URL will be displayed.
(Line breaks become <br />)
(Name, email & website)
(Allow users to contact you through a message form (your email will not be revealed.)
This is a captcha-picture. It is used to prevent mass-access by robots.
Please enter the characters from the image above. (case insensitive)