Online Slots at its best. If you are a real Slot fan then you know that Hopa.com presents the finest collection of Slot machines in the net. Looking for action slots or for video slots, Hopa has it all! Hopa Casino - 120 hrs later still no response via email or chat regarding sent verification paperwork. Sent in my verifications docs 23rd July (same day as cash out) they have not acknowledged in live chat or via emails, live chat after waiting 20.

1. Email Spammer
2. Hopa Slots Spam Emails
3. Hopa Slots Spam Email Settings
4. Hopa Slots Spam Email Settings
5. Hopa Slots Spam Email Spam

You may have seen a fun viral going around these past few days about an intern who quits her job using messages on a whiteboard. Indeed, the tale of “Jenny” has been shared somewhere in the region of 240,000 times on Facebook and 31,000 times on Twitter!

The story has become a little more interesting today when photo website TheChive.com, who originally hosted the photos, revealed that it was all a big publicity stunt to drive traffic to their site.

Email Spammer

If their claims are to be believed, it sounds like the stunt has been a roaring success with traffic jumping up from 15,000 unique visitors to 440,000 in the space of an hour. This certainly reflects the social traffic that a lot of people saw first-hand on Tuesday.

HOPA and Glory

But what’s really interesting is that, in the interview, Editor John Resig explains that “We came up with a hoax that was completely relatable. It wasn’t spread by TechCrunch and Reddit. It was spread by Facebook and inter-office email.”

The important role that email played in this ‘internet meme’ is fascinating. In the initial seeding of virals like this, email is still one of the most natural and effective ways to distribute content, especially considering the element of authenticity it brings in this case. As long as the content is worth sharing, people will naturally take the next steps for themselves.

So when you launch your next viral campaign, don’t forget to seed it with email and make sure you include lots of social network sharing links where possible.

When it comes to spam messages, conventional wisdom dictates that you shouldn’t follow links or call phone numbers in the message, order products from the spammer, or open files attached to the email. We all should know by now that you should never open attached executable files, and spam filters now treat all .exe files as suspicious. When spammers began flooding inboxes with .zip files containing executables, we caught on pretty quickly as well.

But HTML isn’t executable — it’s just plain text — so does that mean it’s safe to open attachments when they’re just HTML files? Hell no! Case in point: this doozy that came through our spam bucket last week.

The message subject reads Your Funds Will Be Transfered and the body helpfully informs the recipient that I am able to complete the funds transfer late night — I hope that doesn’t mean someone sent Jimmy Fallon $28,126 from my bank account. It continues, Copies of the payment is being attached, and the message indeed has an attachment named Copies of the payment.htm which I can open and…

…uh oh. That’s where the trouble begins.

The end result: Three pieces of malware installed; Two password-stealing copies of the Zbot phishing trojan, and a remote-access backdoor to boot. Considering Zbot’s propensity for stealing bank account logins and other sensitive credentials, I suppose the subject line was correct after all. Your funds will be transferred. Just not where you thought.

A more careful look at the attachment reveals that it contains some lightly obfuscated Javascript code. When rendered in a browser, the code instructs the browser to load a page on a Web site called DreamLifeAsia, which is (suprisingly, considering the name) not a pornography site. That page contains instructions for the browser to load a one-pixel-square iframe from a page on the raceobject.ru Web site.

Hopa Slots Spam Emails

The raceobject.ru page contains scripting that instructs the browser to download and execute a payload from yet a third Web site, problemdollars.ru. It just so happens that these fine, upstanding Russian-registered Web sites are hosted on the same server, located at the same IP address.

Whomever scrabbled together this row of dominoes must have thought they were being really clever when they made their code hard to read. Take a look at the line below, for example. At first glance, you might not be able to determine what it’s supposed to do. It looks like gobbledygook, right?

Hopa Slots Spam Email Settings

Well, take out every other character in the line encircled in red, and the cloying concatenation code, and this is what you get:

Yeah, genius, we figured out your awesome trick. It’s the “insert a random letter between every character” encryption algorithm, first invented in the year one by a five year old girl who wanted to pass a clay tablet to her friend in class without the teacher being able to read her Aramaic. The only significant difference is that there are no little hearts drawn over the “i”s. RSA and Bruce Schneier, eat your hearts out. These guys are obviously l33t.

In the end, the page directs a vulnerable browser to download the backdoor to the victim’s computer. The backdoor pulls down Zbot. Zbot contacts its command and control server, pulls down a data file with instructions, and makes another copy of itself on the infected computer’s hard drive.

Hopa Slots Spam Email Settings

In addition, the backdoor changes all the Security Zone settings in IE, clears your cookies, changes the settings for the Windows firewall to permit Windows Explorer (not IE) to receive data from anyone on the Internet, and makes other modifications to security settings that make it far more likely a victim will further infect him- or herself.

Hopa Slots Spam Email Spam

Bottom line, it doesn’t matter what kind of attachment you get. Don’t open anything attached to a spam email in a browser. After all, it’s pretty obvious that this is just a ruse. Jimmy Fallon doesn’t need your money, just some decent Nielsen numbers in his time slot, and that’s one thing Zbot can’t steal.