The social engineering never ends. Today is April Fools' Day, and we have received a spam message with a link, similar to the ones we could see in Saint Valentine. Some of the subjects we have seen so far:
– Today's Joke!
– Happy All Fools!
– Gotcha! April Fool!
– Happy April Fool's Day.
– All Fools' Day
– Surprise! The joke's on you.
This is what you see when you go to the site:
We have seen different file names being downloaded, as kickme.exe, foolsday.exe or funny.exe, but it is the same file, the name is the only thing that changes. We are detecting this malware as W32/Nuwar.SK.worm. Be careful, and as always, never trust this kind of messages.