Creating, operating and expanding the Waledac botnet is an ongoing effort, similar to the Storm operation that had dwindled this past year.
The Waledac operators have automated a fairly predictable registration and setup of their malicious web sites and corresponding online pharmaceutical sites reported as fraudulent. They are abusing fast flux dns at an impressive rate as well.
DO NOT VISIT THESE SITES. THEY ARE MALICIOUS AND MAY INFECT YOUR SYSTEM IF YOU CHOOSE TO VISIT THEM WITH A WEB BROWSER. Here are a few that were registered and set up this morning. Be aware that this spamming/botnet operation is an ongoing one:
hxxp://topgreetingsite.com
hxxp://www.greetingsupersite.com
hxxp://www.greetingcardgarb.com
hxxp://greetingcardcalendar.com
hxxp://directchristmasgift.com
You get the idea. Do not fall for the links being spammed out in email messages as ecard deliveries and do not fall for the current “card.exe” being distributed.
