Digital Degenerate

While perusing through our filters in attempt to find the inevitable love and hearts themed spam and malware campaigns, amongst the tons of Valentine's Day themed pharma spam, I noticed a malware campaign leveraging a site called Booking[dot]com. Booking is a company owned by a more familiar brand by the name of Priceline[dot]com, and as you can imagine, helps visitors find good deals on hotel stays. This is the first time I've noticed these guys be used as a cover for malicious activity, but it makes sense.

The emails arrive as a hotel confirmation for the Adobe Inn. After a Google search, it seems that this could be referring to any of many hotels sharing this name. The email is dated Tuesday, 14 February 12, which I'm assuming the 12 part is supposed to mean 2012, and the reservation is for arrival on Sunday, 19 February 12.



Anyone receiving this email may be tricked into believing that even though they know they didn't make this reservation, that perhaps their Valentine's sweetie had something romantic planned. Curiosity just may lead them into sneaking a peek into what their surprise may be. In order to be fooled though, they will have to overlook some HTML formatting that accidentally shows up in the email itself, the strange date format, as well as the lack of any personalization.


Keep love in your heart and be not afraid though, as AppRiver is currently blocking all known variants of this malware. Happy Valentine's Day!