The company’s SophosLabs intercepted a “spammed-out email campaign” which was designed to spread malware.
The blog notes that the email address above misspells “Facebook” as “Faceboook.” The link takes the user to a malicious iFrame script, which exposes the user’s computer to malware. However, within four seconds, the user’s browser is directed to a presumably innocent Facebook page.
Sophos provided the following example:
Source: Yahoo News