Analysis by: Harry Reynoso

Spammers are now leveraging popular website, Wikipedia to point users to pharmacy sites. TrendLabs engineers spotted spammed messages in plain text that contained a URL. Once users click on the URL, they are redirected to the pharmacy site dubbed as�Wikipharmacy.

The said website imitates the logo of Wikipedia to make it look legitimate. While spam runs leading to pharmacy sites are not new, this particular spammed message is the first sample we've seen that leverages�Wikipedia as a lure for users to click the links.

Figure 2. Screenshot of the spam page


Users are�advised never to open any suspicious-looking emails and click on embedded links.
 SPAM BLOCKING DATE / TIME: June 07, 2011 GMT-8
 TMASE INFO
  • ENGINE:6.5
  • PATTERN:8186