There is a new type of deceptive attack on the Internet. This attack leads you to believe that someone has sent you an electronic greeting card and ask you to download the card. During the installation procedure that follows, you are presented with a license agreement that "allows" the software to send itself in your name to any and all contacts you may have in a Microsoft Outlook address book. Here is an example of the email:
Subject: %Recipient% you have a greeting card from %Sender%.
Body:
%Recipient%,
%sender% has sent you an greeting card -- a postcard from Friend-Greetings.com. You can pickup your greeting card at Friend-Greetings.com by clicking on the link below.
http://www.friend-greeting.com/%numb...e%&id=%number%
Message:
------------------------------------------------------------------------
%Recipient%,
I sent you a greeting card - please pick it up.
%Sender%
------------------------------------------------------------------------
Other websites that use this same method are:
www.friend-cards.net
www.friend-cards.com
www.cool-downloads.net
www.friendgreetings.net
www.friend-greeting.com
Here is a screen shot of the "questionable" license agreement: