Japanese shoppers are currently being phished with spoofed Amazon emails. 99% of this spam is being emitted from IPs originating from ASN 4134: CHINANET backbone @chinateleglobal. Read the thread for more detail. #chinese #botnet #phishing 
Recently we've observed a huge spam run with the subject line "お支払い方法の情報を更新." Google translates this as "Updated payment method information." The message contents are phishing emails, spoofing Amazon, targeting Japanese shoppers.
The spam run continues as we tweet, but Spamhaus subscribers in Japan and worldwide are no longer seeing it in their inboxes.
Big shout out to @KoliLoksOu for collaborating on this! Just goes to show sharing reputation data keeps the internet a safer place.... but you all knew that already? Right?
• • •
Missing some Tweet in this thread? You can try to
force a refresh
