“Dell online store” trojan emails

Websense Security Labs has received reports of a new email campaign starting in Australia that attempts to lure users to connecting to a malicious website.

The Australia CERT has reported emails that are spoofing the Dell online store. The emails claim that the user is being charged for a camera purchase and requests they connect to a site in order to view their profile. The site is encoding their code via Java Script. 

When decoded it includes  eight different IFRAMES, all which attempt to load exploit code and download and install new malicious code. The site itself appears to be going up and down sporadically.

Sample Email from the original advisory:

        Subject: Your order #[number] has been accepted for the amount
                 865.00 AUD

        Thank you.
        Dell  Online Store.
Although this appears to be a new deception technique the website has been used in malicious code attacks in the past and Websense customers are protected from connecting to it already.