Watch out for hostile emails spoofing Boston bombing videos

[Wiz Feinberg]

On April 17, 2013, I published a blog article on Wiz's Security Blog, detailing an ongoing malware threat in the wild. The threat is a spam email blast with subjects and links claiming to be about the Boston bombing of April 15. The article about the Boston bombing scams is here.

Suffice it to say that if one were to be fooled into clicking on one of these links, you would indeed see embedded YouTube videos in iframes. What you wouldn't see is in the last iframe on the bottom of the page. It contains a Java Applet, whose associate .jar file attacks your computer. Read my blog post for the details so you can remain aware and not get tricked into clicking on such a link.