MSNBC / CNN malware run

Newsfeed

Newsfeed

Nachrichtenbote
For some days we've been spam runs with titles like "CNN Alerts: My Custom Alert" or "CNN Alerts: Breaking news". These are fake news articles that point to a fake news page that will try to download malware to your machine.

Apparently people stopped clicking on fake CNN links as today the attackers switched the mails to look like they are now coming from MSNBC.

Some examples:

msnbc.png


Example email:


  • [SIZE=-2]From: MSNBC Breaking News
    Subject: msnbc.com - BREAKING NEWS: Elvis Presley daughter gives birth to twins
    Precedence: list

    msnbc.com: BREAKING NEWS: Elvis Presley daughter gives birth to twins
    Find out more at http://breakingnews.msnbc.com
    ======================================================
    See the top news of the day at MSNBC.com, and the latest from Today Show and NBC Nightly News.
    =========================================
    This e-mail is never sent unsolicited. You have received this MSNBC Breaking News Newsletter
    newsletter because you subscribed to it or, someone forwarded it to you.
    To remove yourself from the list (or to add yourself to the list if this
    message was forwarded to you) simply go to
    http://www.msnbc.msn.com/id/11611202, select unsubscribe, enter the
    email address receiving this message, and click the Go button.
    Microsoft Corporation - One Microsoft Way - Redmond, WA 98052
    MSN PRIVACY STATEMENT
    http://privacy.msn.com (http://privacy.msn.com/)
    [/SIZE]


And the links point to a web page looking like this (notice the sudden change from MSNBC to CNN):

cnn_0.png


The site tries to prompt you to download ADOBE_FLASH.EXE, which we detect as Trojan-Downloader.Win32.Exchanger.mn. On 13/08/08 At 03:03 PM



Weiterlesen...
 
Zurück
Oben