Got me

The email looked like her email account had been hacked. Except the recipient list looked right and the link looked good.

From the British security firm, Sophos:

Weight loss spam? Seen it. Spam from hacked email accounts? Seen it. Redirects hosted on legitimate web sites? Seen it. Nothing new here then, move along.

If all this is such old hat why have we seen such a flurry of activity from these spam campaigns in recent weeks?

Sophos products block the redirect page as Troj/Redir-O. This allows us to get visibility into how widespread these campaigns are. Clearly there are many people receiving the spam messages – over the past week, Troj/Redir-O is:
– the 4th most prevalent web threat blocked on computers running Sophos Anti-Virus

– the 2nd most prevalent web threat blocked by Sophos web appliances

Yup, if I'd been on a Windows computer, I would have loaded a piece of Trojan software.