Server upgrade spam redux.

[JMH]

Two days ago my colleague Pob blogged about a run of high-volume server upgrade spam with a link to a Zbot executable. Today a similar campaign has shown up at our spamtraps, this time with the malware attached instead of linked. The spam idea is similar, but is of note because the domain of the recipient is liberally sprinkled throughout the message. This gives a false sense of legitimacy to the spam messages.

Server upgrade spam redux | SophosLabs blog