We have been made aware of a new wave of the pizza phishing scam.  The email informs you that you were apparentl very hungry and ordered some pizza.  Only, if you try to cancel this "mistaken" order, you get, free of charge, a side of malware for your computer.   The link goes through kontrollmedia.hu (only one of many domain names used, and begins a sequence of downloading malware to your computer.

These emails can be traced to various IP addresses, mostly associated with spam and various attacks. Some of these IP addresses include:

• 112.156.251.3 (South Korea)
• 41.168.5.140 (Neotel, South Africa)
• 62.85.27.129 (Microlink, Latvia)
• 83.170.91.152 (UK2.NET, UK)
• 85.214.204.32 (Strato AG, Germany)
• 88.190.22.72 (Free SAS / ProXad, France)
• 89.31.145.154 (Nexen, France)
• 112.78.124.115 (Sakura Internet, Japan)
• 210.56.23.100 (Commission For Science And Technology, Pakistan)
• 211.44.250.173 (SK Broadband, Korea)
• 219.94.194.138 (Sakura Internet, Japan)

In tracking the links associated with the pizza orders, the CANCEL ORDER NOW! initiates the use of exploits, particularly the Phoenix Exploit's Kit, a popular do-it-yourself (DIY) kits used by cybercriminals to distribute malware payloads. After the kit successfully exploits vulnerable software on the infected system, it then drops two binaries, a trojan and a Zbot variant.  Cancelling your pizza order may compromise your system.

On our next post, we will discuss ways to protect yourself from this type of attack. Below is a video of AVM technology's interview with NBC 12 in Richmond discussing this Internet security threat.

The email is similar to this:

From: BrandiSadlon (at) hotmail.com
Sent: Tuesday, April 17, 2012 2:09 AM
To: [your address goes here]
Subject: Order confrmation

You've just ordered pizza from our site

Pizza Ultimate Cheese Lover's with extras:
- Chicken
- Diced Tomatoes
- Pineapple
- Green Peppers
- Extra Cheese
- Easy On Sauce
______________________________

__
Pizza Chicken Supreme with extras:
- Pork
- Pepperoni
- Black Olives
- No Cheese
- No Sauce
________________________________
Pizza Pepperoni Lover's with extras:
- Bacon Pieces
- Italian Sausage
- Italian Sausage
- Black Olives
- Black Olives
- No Cheese
- Extra Sauce
________________________________
Pizza Ultimate Cheese Lover's with extras:
- Pepperoni
- Beef
- Bacon Pieces
- Black Olives
- Black Olives
- Extra Cheese
- No Sauce
________________________________
Pizza Pepperoni Lover's with extras:
- Italian Sausage
- Pepperoni
- Beef
- Jalapenos
- Green Peppers
- No Cheese
- No Sauce
________________________________
Drinks
- Dr. Pepper x 4
- Squirt x 5
- Gold Peak Tea x 4
________________________________
Total to pay:   210.65$

If you haven't made the order and it's a fraud case, please follow the link and cancel the order.

CANCEL ORDER NOW!

If you don't do that shortly, the order will be confirmed and delivered to you.

Best wishes
Pizza by TINO