A modern Joe Job?

This morning on our spamtraps SophosLabs saw a large number of spam messages with similar subjects:

  • Best hosting for CP
  • Hosting
  • Stable rus hosting
  • Anonym hosting

Looking into the email it just had a GIF image.

Joe-Jobbed?

Going to the website referenced I was presented with the following text:


Dear guests. If you have received any mail from XXXXXXXXXXX.net please note that we are also suffering from it. We ensure that XXXXXXXXXXX.net has never sent any unsolicited mail to anyone. Current SPAM-attack in our name is made by one of our clients whose server was shut down because of mass violations. Please do not consider us as senders of this e-mail.

This is the first time that I have seen a Joe Job using image spam, presuming of course it is a Joe Job.