MSNBCを騙ったマルウェアをダウンロードさせようとするメール

先日から届いているCNNを装ってマルウェアをダウンロードさせるメールと同様のパターンの
MSNBCを装ったメールが夜半より続々と届いています。

タイトルは

msnbc.com - BREAKING NEWS:ニュース名

で、ニュース名には以下のようなそれらしいニュース名が入っています。

  • [audio] Church Group Offers Homosexual New Life In Closet
  • [video] Cindy Mccain Talks About Her Boobs
  • [video] If Barack Obama Is an Oreo, What Is John McLaughlin?
  • [video] Take it from us: People Hate Satire
  • Americans loves to sue people
  • And Now We Return To The Subject Of Jennifer Anistons Breasts
  • Angelina Jolie Pregnancy. 'it Was All A Hoax!'
  • Anthrax case solved
  • Army Of Two, Dick Cheney And John Mccain Invade Iran
  • Arnold Says im Gay Too!
  • Barack Obama Can Fly Through The Air Like That Guy On Heroes
  • Barbra Streisand: "I Don't Want to Talk to the Maid"
  • Blair: Im Not Gay, Thats Just My Accent
  • Bomb scare grounds thousands of flights at UK Heathrow airport
  • Bush, Cheney To Co-Star In "Flip This White House"
  • Cannibalism!........In The Usa
  • Catapult Program Flings Commuters to Work
  • Children Admit To Being Little Shits. Video
  • Cristiano Ronaldo Disses Paris Hilton "um Louro Mudo Feio!"
  • Europeans dislike Americans attitudes
  • Ex-Soviet spies confess to 1500 murders
  • Fan Rushed to Hospital After Bleeding Team Colors
  • Favre gets unconditional reverse deactivation restriction preclusion
  • Find out how to get top returns for your money at minimum risk
  • Forecasters Predict ‘Hello Dolly’ Headlines as Storm Hits
  • Fox News Admits Grievous Error
  • Freddie Mac loses $1B
  • Gay Bishop Was A Wrestling Pro
  • Gay Men Perceive Each Other As Homophobic
  • Girl, 13, wins world chess championship
  • Google launches free music downloads in China
  • High calorie food banned in canteens
  • History Channel Begins Incorporating Product Placements into History
  • Host Ty Pennington's House Inadvertantly Bulldozed
  • I will be suing you
  • Is Gay Bishop Gay Enough?
  • Jihadist Children's Television Workshop Debuts New Characters
  • John Mccain Denies Allegations That He Is A Politician
  • John Mccain Proposes Gay Marriage
  • Laika The Russian Space Dog, Returns To Earth
  • Laughter of Bullpen Coach Leads to Paranoia Among Texas Ranger Relievers
  • London named top literary destination
  • Mary-Kate Olsen implicated in Heath Ledger's death
  • Mary-Kate Olsen responsible for Heath Ledger's death
  • Maybe al-Maliki's Comments Really Were Lost in Translation
  • McCain gives up fighting for presidency
  • McCain Plans Vietnam Campaign Tour
  • McCain Serenades Gramm: '50 Ways to Leave Your Hoover'
  • Mccain Will Promote The Takeover Of America
  • McCain, Obama: Cosmo Cover Also Tasteless, Offensive
  • Microsoft announces takeover bid for Intel, details inside
  • NASA Claim to Have Achieved First Zero-Gravity Erection
  • nazi Toddlers Ruined My Birthday
  • New Economic Stimulus Package Inlcudes Goat
  • Nuts! Jackson Backs Neutering Stray Politicians
  • Obama Captures Osama
  • Obama Is Anorexic Over-Exerciser;
  • Obama is gay. Watch the Proof.
  • Obama set to win presidency
  • Oil prices rises due to attacks
  • One Hot White Chick Injured in Tsunami Disaster
  • Osama Bin Laden caught finally !
  • Paris Hilton Infested With Cockroaches
  • Paris Hilton To Operate New Atom Smasher
  • Please give your opinions for change
  • Polar Bear Finds Yoga Great For Flexibility, But Murder On The Balls
  • Polar Bears must be taught to Swim
  • POLICE SOURCE: TOT MAY BE DEAD
  • Police to Tackle Bike Crime with New ‘Indifferent Squad’
  • Preliminary polls for the election
  • Royals Become First Sports Team To Sponsor Gay Guy
  • Russia: Forget About Georgia's Old Borders
  • Sarah Jessica Parker Arrested For Gross Negligee
  • School Board Adopts Gay-Ass Uniform Policy
  • South Carolina Sinking - Gov. Implores Obese Citizens to "Exercise For It
  • Star Trek star dies at age 79
  • Steve Jobs Names God as Successor
  • The Breasts Of Lindsay Lohan
  • The Incredible Hulk: George Bush
  • The World is on Pace to Run out of Internet by 2010
  • Three Italian College Students Purchase Kansas City Royals for 500 Euros
  • Tories say NHS dental bills rising alarmingly
  • Turner Empire poised for bankruptcy file
  • Ufos Sighted Over Uk
  • Unemployed To Be Used For Soup
  • West Nile virus spreading in USA
  • Where Do Homosexuals Get All Their Energy
  • Which Olsen Twin is the Evil Twin?
  • White Male Workers Banned In Britain
  • Wildfires hit Arizona, leave thousands homeless
  • World Leaders Gather To Roast Mahmoud Ahmadinejad
  • You are looking at a lawsuit


MSNBCマイクロソフトNBCが共同で設立したニュース専門局です。
(CNNと同じようなコンセプトの放送局)
詳しくはWikipediaを参考
wikipedia:MSNBC


手法もCNNのメールと同様でHTMLメール内容のリンク先がMSNBCではないマルウェアをダウンロードさせようとするサイトとなっています。


以下は一例です。

Return-Path: <Gerrit-itsatroc@diaz.net.ar>
X-Original-To: xxxxxxxx@xxx.xxxxxx.xx.jp
Delivered-To: xxxxxxxx@xxx.xxxxxx.xx.jp
Received: from xxxxx.xxx.xx.jp (xxxxx.xxx.xx.jp [xxx.xx.xxx.xx])
	by xxx.xxxxxx.xx.jp (Postfix) with ESMTP id 0385661C43
	for <xxxxxxxx@xxx.xxxxxx.xx.jp>; Wed, 13 Aug 2008 22:58:00 +0900 (JST)
Received: from (unknown [xxx.xx.xxx.xx]) by xxxxxxxxx.xxx.xx.jp with smtp
	 id 5794_d75edbac_693f_11dd_a8e0_00188b332d9d;
	Wed, 13 Aug 2008 22:58:00 +0900
Received: from xx.xxxxxxxxx.xx.jp (xx.xxxxxxxxx.xx.jp [xxx.xxx.xxx.xxx])
	by xxxxx.xxx.xx.jp (Postfix) with ESMTP id 9E32A290E36
	for <xxxxxxxx@xxx.xxxxxx.xx.jp>; Wed, 13 Aug 2008 22:58:00 +0900 (JST)
Received: from adsl-pool2-239.metrotel.net.co (adsl-pool2-239.metrotel.net.co [201.220.85.239] (may be forged))
	by xx.xxxxxxxxx.xx.jp (8.14.2/8.13.2) with ESMTP id m7DDvsG7012752
	for <xxxxxxxx@xxxxxxxxx.xx.jp>; Wed, 13 Aug 2008 22:57:57 +0900
Authentication-Results: xx.xxxxxxxxx.xx.jp from=Gerrit-itsatroc@diaz.net.ar; sender-id=neutral; spf=neutral
X-DomainKeys: Sendmail DomainKeys Filter v0.3.0 xx.xxxxxxxxx.xx.jp m7DDvsG7012752
thread-index: XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
Thread-Topic: msnbc.com - BREAKING NEWS: McCain gives up fighting for presidency
MIME-Version: 1.0
Content-Type: text/html; charset="iso-8859-1"
Content-Transfer-Encoding: 7bit
X-Mailer: Microsoft CDO for Windows 2000
Content-Class: urn:content-classes:message
Importance: normal
Priority: normal
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.3119
Message-ID:  <XXXXXXXXXXXXXXXXXXXXX$XXXXXXXXXXXXXX>
Date:         Wed, 13 Aug 2008 09:01:45 -0500
Reply-To:     MSNBC Breaking News <Gerrit-itsatroc@diaz.net.ar>
From:         MSNBC Breaking News <Gerrit-itsatroc@diaz.net.ar>
Subject: msnbc.com - BREAKING NEWS: McCain gives up fighting for presidency
To: xxxxxxxx@xxxxxxxxx.xx.jp
Precedence: list

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=Content-Type content="text/html; charset=iso-8859-1">
<META content="MSHTML 6.00.6000.16681" name=GENERATOR>
<STYLE></STYLE>
</HEAD>
<BODY bgColor=#ffffff>
<FONT face=Arial size=2>
msnbc.com: BREAKING NEWS: McCain gives up fighting for presidency <br>
<br>

Find out more at <a href="http://www.berachahbaptist.org/up.html">http://breakingnews.msnbc.com</a><br>

======================================================<br>
See the top news of the day at MSNBC.com, and the latest from Today Show and NBC Nightly News.<br>
<br>
=========================================<br>
This e-mail is never sent unsolicited. You have received this MSNBC Breaking News Newsletter<br>
newsletter because you subscribed to it or, someone forwarded it to you.</br>
<br>
To remove yourself from the list (or to add yourself to the list if this<br>
message was forwarded to you) simply go to</br>
<br>
<a href="http://www.msnbc.msn.com/id/99999999">http://www.msnbc.msn.com/id/99999999</a>, select unsubscribe, enter the<br>
email address receiving this message, and click the Go button.<br>
<br>
Microsoft Corporation - One Microsoft Way - Redmond, WA 98052<br>
MSN PRIVACY STATEMENT<br>
http://privacy.msn.com (<a href="http://privacy.msn.com/">http://privacy.msn.com/></A>)