We spotted a spammed message that purports as a notification from Facebook. It informs users that their accounts have been blocked due to a suspicious activity. They are also required to click a link to supposedly activate their accounts. Once users clicked this URL, they are lead to a malicious site that prompts a message informing them that their antivirus has detected an activity. Users systems are then downloaded by a FAKE AV malware that pretends as Microsoft Antivirus 2013.

 Data/Hora do bloqueio de spam: 20 dezembro 2012 GMT-8
 TMASE
  • Versão do mecan
  • Patrón TMASE: 9468