New Spam Campaign – using CNN’s Daily Top 10 format

Email This Post Email This Post   

August 4th, 2008

A warning that we are seeing he beginning of a new spam campaign with a possible exploit vector. The e-mails claim to be from CNN based on the subject line but the from e-mail address are not at CNN. They also have links to videos and will probably either silently install malware or prompt you to install the ‘Codec’ required to view the video file. This will not be a real codec but malware designed to take over your PC.

Do not open any e-mail that looks like it came from CNN.com until this attack is over.

- Shaun

Here are some more Blog articles on CNN Spam:

  • CNN Custom Alerts Spam
  • - In general, my anti-spam filters and tools are pretty effective. So when I start to see something like this…. ….it’s obvious that a huge spam wave is underway. These are, of course, related to the fake CNN Spam from a few days ago. …

  • CNN Daily Top 10 Videos Spam
  • - The first clue that something might have been amiss is the strangeness of some of the titles (“Michael Jackson sued by his own dog” isn’t something I’d expect to see on CNN, at least not yet). Of course, the giveaway is that regardless …

  • Spam Alert: Huge Volumes of Fake CNN News Updates
  • - Heads up on a new, very high volume Fake CNN News Update spam run that is making the rounds. The subject of the email is “CNN.com Daily Top 10.” Our Threat Operations Center has seen over 5 million of these just in the last hour alone …

  • CNN Spam Diversifies . . .
  • - The spam messages contain graphics which are actually being loaded from the real CNN website. We’ll load them here from the same site so you can see them. These are the graphics present in each of the spam emails, fetched directly from …

  • CNN Spam?
  • - Over on the so-called “CNN Blog” we find this entry: August 8, 2008 Fraudulent spam about CNN.com Posted: 07:45 PM…

  • CNN Daily Top 10 leads users to site hosting malware
  • - Following the links in the CNN.com Daily Top 10 email could lead you to sites that hosts malware. MX Lab detected and intercepted the first messages at around 7:48 PM local Belgian time and is monitoring an outbreak of this type. …

  • Here We Go Again: CNN Spam is now MSNBC Spam
  • - This time, however it appears that the people responsible for the CNN Spam outbreak last week (original post here and update here) are now responsible for a new outbreak today alleging to be MSNBC news updates. …

  • “CNN Alerts: My Custom Alert email spam” – don’t click
  • - If you get an email from CNN Alerts with a subject line like: “CNN Alerts: My Custom Alert email spam” be careful. This is being sent out to people who never signed up for CNN alerts as well as those who have. …

  • Quickly morphing CNN spam
  • - The spam outbreak “from” CNN the occurred this past week has morphed into a new breed:. image. It appears that the spammers have learned from previous mistakes because this one is a little slicker. In the body contents, just like the …

  • CNN spam changes to ‘MSN Breaking News’
  • - The malicious CNN campaign by Rustock has morphed to ‘MSN Breaking News’.

Post to Twitter

Entry Filed under: Botnets, Bulletins

Leave a Comment

Required

Required, hidden

Some HTML allowed:
<a href="" title=""> <abbr title=""> <acronym title=""> <b> <blockquote cite=""> <cite> <code> <del datetime=""> <em> <i> <q cite=""> <strike> <strong>

Trackback this post  |  Subscribe to the comments via RSS Feed

Archives

Categories

March 2010
M T W T F S S
« Jan «-»  
1234567
891011121314
15161718192021
22232425262728
293031  

White T-Shirt

$18.99

Meta