We’ve recently started seeing a more sophisticated variant of the “OEM Software” spam. Rather than simply providing a list of software, prices and a link to a site, this new one attempts to fake an amazon.com email. The email uses the same terminology as an amazon site and includes images downloaded directly from amazon’s web site.
The reader, in the examples we have seen so far, is directed to the website www.oemsanta.net, this domain name was created on the Friday 2nd of December 2005 and we first saw the emails on Monday 5th December.
The software offered for sale is pirated - they even tell you in their FAQ that “The software offered is only for downloading in which you do not receive a fancy package, a printed manual or a license”.
The email contents are shown below
