Diary

 

Share |
Published: 2008-08-13,
Last Updated: 2008-08-13 15:28:36 UTC
by Adrien de Beaupre (Version: 1)
6 comment(s)

The malware spamming out CNN alerts is now picking on MSNBC. The links do lead to malware advise your users not to click on them! I have seen hundreds this morning, and a number of readers have written in about them.The headlines vary, but they all appear to start "BREAKING NEWS".

Cheers,
Adrien de Beaupré intru-shun.ca

 

Keywords: malware spam
6 comment(s)

Comments

Found on our mail system the subjects begin with

msnbc.com - BREAKING NEWS:
posted by John, Wed Aug 13 2008, 16:49
And it's the same group as were sending out the CNN alerts, because the hijacked servers are the same, with the same page and exploit. (http://www.vivtek.com/projects/despammed/stormspam.html)
posted by Michael, Wed Aug 13 2008, 16:59
got another one saying 'Yang gives up control of Yahoo"
posted by eknirb, Wed Aug 13 2008, 20:38
Aaaand now the landing pages have switched to MSNBC-themed pages instead of CNN-themed. The structure is otherwise identical, though. (Well, instead of the asvoo.org antivirus popup, they now have an i56web.org antivirus popup. But otherwise identical exploits.)
posted by Michael, Thu Aug 14 2008, 02:27
I appreciate a good joke:
http://didierstevens.wordpress.com/2008/08/13/fake-msnbc-breaking-news-or-fake-cnn-custom-alert-make-up-your-mind/
posted by Didier Stevens, Thu Aug 14 2008, 06:33
The following contains detailed analysis for bogus MSNBC and CNN news:

http://malware-test-lab.blogspot.com/
posted by Roger Chiu, Thu Aug 14 2008, 09:02
Login here to post a comment. Diary Archive