We spotted a spammed message that purports as a notification from Facebook. It informs users that their accounts have been blocked due to a suspicious activity. They are also required to click a link to supposedly activate their accounts. Once users clicked this URL, they are lead to a malicious site that prompts a message informing them that their antivirus has detected an activity. Users systems are then downloaded by a FAKE AV malware that pretends as Microsoft Antivirus 2013.

 SPAM BLOCKING DATE / TIME: 20 de grudnia de 2012 GMT-8
 TMASE
  • TMASE Engine: :
  • Patrón TMASE: :9468