Red Securium

The spam emails contained PDF attachments with links that redirect to fake adult dating sites. One of the redirects showed a mysterious message “follow the white rabbit”, a famous reference in pop culture. An unusual form of spam campaign has surfaced in the cyberspace. In this phishing campaign, the spam email contains attachments with links that redirect to fake adult dating sites. Some links also impersonate the popular dating site Ashley Madison with their own fraudulent version. Security site Bleeping Computer reported details of the spam mails observed in this campaign. A sample received by the site shows that the email comes from a user named Gell with an address info@reeedirect[.]ru. Subject lines in the mail consist of random names. At the bottom of the email, there is an attachment in PDF form. If users click on the links present in the PDF attachment, it initiates a series of redirects which ultimately takes them to a fake adult dating site. Following the whi