These two messages appeared on the Spatialite mailing list today:
From: firstname.lastname@example.org Subject:Where can I find an online anti-virus that doesn’t install on your PC? I’ve got 5 PCs that I’m trying to use to train disadvantaged young people. The problem is they are riddled with viruses and a firewall blocks me from updating them. The people in charge of maintaining the PCs won’t fix them or give me the admin password (Win XP) to let me install a new or updated antivirus the centre is being shut down in afew months. If they were working, I could still do a lot with them, so I’ve been looking for a good online virus scan - but they all try to download a little .exe onto your PC first, and the settings on the PCs won’t allow that. Suggestions? Solutions? Links?
The alleged reply:
From: email@example.com To: Where can I find an online anti-virus that doesn’t install on your PC? >so I’ve been looking for a good online virus scan I usually use this one http://pmcware.conartists/freedowns
That site (address altered to protect the vulnerable) is most definitely not hosting anti-virus. In fact it’s certainly hosting malware. The page claimed that it found ‘Nuker.Win32.CGSi’ in ‘C:\\WINDOWS\\system32’, on my Linux laptop. Given the site, the similarity of the email addresses, and the impossibility of a request (virus scan without any download) - I think both messages are part of the same phishing attempt. Which makes this the first time I’ve seen a spammer have a conversion with them-self.