Obama Phishers Now Targeting Classmates.Com

The Obama Phishers, discussed here and here are changing tactics again to steal your personal information.  At first they were using videos of hope and change to trick you into installing a fake flashplayer update.  Then they moved to a BankofAmerica scam.  Now they are circulating fake invitations to view a video at Classmates.Com.

Thanks again to Jose Nazario at Arbor here for the analysis:

The Gozi infostealer is running around, this time using new domains and a new lure: a “video invitation from your classmates”. This has been going on all week, too. In an email purporting to be from Classmates.com, you’re told to go look at a web page and join up. To view the video you need to .. you guessed it, download a new Flash player.

The reason the phishers keep using this tactic is first and foremost, because it works.  People receive an email with a link to you in a video- well, whose curiousity wouldn’t be aroused?  But this malware also works because Adobe has such crappy code!  I run two bits of their software on my PC’s-  the flash player and the acrobat reader.  Both require such frequent updates it wouldn’t surprise a user that yet another version should be downloaded to view the content.