A new Waled campaign with the US Independence Day theme article has been posted at Sophos. The article includes a screen shot of the link that is included in the spam.

Numaan Huq, the author of the article, notes that although the title in the linked webpage says, “The largest firework happened this Saturday,” the campaign actually started on Friday.

The campaign is detected as Mal/WaledPak-G and Mal/WaledJs-A.

The linked site looks like a Youtube site. It asks the user to click on the video to play. However, it will download an exe file instead.

Source: Sophos