In a particularly cynical move, spammers are sending out e-mails purporting to be about the fighting in Gaza, which has drawn international attention because of the hundreds of civilian casualties.
The spams, which appear to be news items from CNN, contain news about the fighting and a link to a fake CNN news site. Recipients who click on the link see a pop-up message urging them to install an upgrade to Adobe Flash Player 10.
Those who try to download the Flash upgrade get an SSL stealing Trojan installed in their computer that can penetrate secure Web sites.
In a blogpost today, CNN.com executive producer Rena Golden warned that the message is fraudulent and did not come from CNN. She urged readers to delete it from their mailboxes.
~snip
Security vendor AppRiver told InternetNews.com that subject lines used include Gaza Groups Report on War, Israel Assaults Hamas In Gaza, Support Israel's Fight and Reminders of War in Gaza – CNN.
Security vendor AppRiver told InternetNews.com that subject lines used include Gaza Groups Report on War, Israel Assaults Hamas In Gaza, Support Israel's Fight and Reminders of War in Gaza - CNN.
Purported senders include CNN Gaza Crisis News, CNN Media Center, CNN News, CNN News and Events, and CNN News Releases.
According to RSA's blog, the gang behind this Trojan is known and has a history of similar attacks.
This is not the first time spammers have leveraged CNN - during the Beijing Olympics last year, spammers sent out fake CNN news reports with Olympics-related headlines. In those attacks, too, they had a link urging an Adobe Flash update.
Fred Touchette, senior security analyst at AppRiver, told InternetNews.com that the attacks began at 5:30 a.m. central time yesterday and that, so far, 500,000 e-mails have been sent by the spammers.
http://www.internetnews.com/webcontent/article.php/3795461/Spammers+Leverage+Battle+in+Gaza+CNN.htm 
Printer-friendly format
Email this thread to a friend
Bookmark this thread
(1000+ posts)
Send PM |
Profile |
Ignore
