The malicious notifications contain links that point to exploit kit

Apr 23, 2013 20:11 GMT  ·  By

Internet users should be on the lookout for bogus emails that appear to come from the Loss Avoidance Alert System.

Conrad Longmore reports on Dynamoo’s Blog that the emails, entitled “The Loss Avoidance Alerts that you requested are now available on the internet,” are designed to trick users into clicking on a link that points to a malicious website.

“Loss Avoidance Report: The Loss Avoidance Alerts that was processed are now available on a secure website at: www.lossavoidancealert.org. Note: If the Alert Number does not appear on the Home Page - just go to the top left Search Box, enter the Alert Number and hit Go,” the malicious emails read.

However, the link doesn’t point to lossavoidancealert.org as it appears. Instead, it leads to a compromised website that has been set up to host an exploit kit.

It’s believed that the campaign has been launched by the Amerika crew, a criminal organization that’s behind numerous spam runs, including ones related to PayPal and even the Boston Marathon explosions.