Match.com Members Targeted by Fake Emails

According to an online report, it looks like email spammers are spoofing Match.com. Since Monday spammers have sent out emails that appear on the surface to be from Match.com.

The attack involves messages claiming to be from someone on the dating website who wants to show the user pictures and videos.

If the link is clicked on, you are then directed to a malicious website which then attempts to install a fake video player which is actually the Trojan called Papras. From the F-Secure website summary page on this Malware:

Trojan-PSW.Win32.Papras.DC steals login credentials and other sensitive information on the compromised system. It also drops and uses a rootkit driver to hide itself. The rootkit driver is detected as Rootkit.Win32.Agent.SZ.

This is definitely not something you want installed on your computer.

The good news is most of the popular Anti-Virus programs will protect you from this threat being installed now (as long as you keep them updated), but as always you should be careful when clicking on any link from an email. If you get an email that you are unsure of and it is from a website you deal with, always visit the website by your browsers bookmarks instead of the link in the email. You should also forward the email to the company to let them know you think someone is sending you fake emails.

Match.com is far from the first site to be spoofed like this, though it is the first time I have heard of a dating site having this trouble. Usually it is the major banks or websites like PayPal which get targeted by email spoofers.

Visit mxLogic for more information on this story and read F-Secure for more about what Papras modifies on your computer.