I got a e-mail that fakes to be from the bank Bradesco, a typical phishing talking about the necessity to reactivate the security access for electronic banking... anyway, the url is
#http://g7leszno.ovh.org/tmp/NovoSistemaDeSeguranca/Bradesco/, which redirects to
#http://corpsolutions.com.br/tmp/NovoSistemaDeSeguranca/Bradesco/, which pops-up a flash plugin which seems to be infected!
take a look!