Blog

Websense® Security Labs™ Threatseeker™ technology has revealed that the Storm worm has changed spamming tactics. Spam sent by infected hosts contain links of the format:

http://(IP address)/(short random directory name)

These links redirect users to medical spam sites, but the links are still infected at the root level (e.g. http://IP address/) The redirects help these medical spam sites attempt to evade spam filters.