CipherPorn

Over the last few days SophosLabs have been seeing a strange porn campaign. An example is shown below:


Subject: overnice hkbh Lesbian eho licking mhq Male's ajv Cock!


qbdazy, friendly sfb Bitch egsw Masturbates!
http://XXXXXXXX.XXX
RVUcVRiYVd.RVUCVR,hVX

The interesting feature of this campaign is that what seem to be a hashbuster at the end of the email is actually the email address of the recipient.

I have modified the hashbuster above to an address that I can read. So email me at RVUcVRiYVd.RVUCVR,hVX if you are seeing similar emails or find this technique interesting.