Security researchers have identified a new scam involving deceptive emails informing users that a Facebook friend has signed up for Pinterest.
The fake messages purport to come from the photo-sharing service and are designed to distribute malware.
According to researcher Conrad Longmore of Blog Dynamoo, the emails are titled “Your Facebook friend Andrew Hernandez joined Pinterest” and state the following:
“Your Facebook friend Andrew Hernandez just joined Pinterest. Help us welcome Carol to the community! Visit profile”
The message doesn't make any sense. However, some users may rush to click on the "Visit Profile" button included in the email. In this case, users are taken to a fake browser download page designed to distribute malware.
The most worrying fact according to Longmore is that only Kaspersky products recognize the threat, specifically as a variant of the infamous ZeuS malware.
The expert points out that the domain used to distribute the malware is hosted on an IP address used by a Russian cybercriminal group that has been absent for a long time.
