We spotted a spammed message that purports as a notification from Facebook. It informs users that their accounts have been blocked due to a suspicious activity. They are also required to click a link to supposedly activate their accounts. Once users clicked this URL, they are lead to a malicious site that prompts a message informing them that their antivirus has detected an activity. Users systems are then downloaded by a FAKE AV malware that pretends as Microsoft Antivirus 2013.

 Data/ora di blocco Spam: : 20 dicembre 2012 GMT-8
 TMASE
  • Motore TMASE: :
  • Patrón TMASE: :9468