Another Trojan from CNN Alerts: My Custom Alert Email

The spammers who have been sending the CNN.com daily top ten email spam seems to be sending a second wave of malware spams but this time the links really look like they lead to legit CNN links. Just today, I received this CNN alerts: My custom alert email and the supposed news the email brings is really catchy: President Bush withdraws from Iraq. The hoax news title link also looks like a real CNN site: http://www.cnn.com/2008/WORLD/asiapcf/08/07/threat.ap/index.html. Unfortunately, the sender of the email does not really look suspicious because it comes from a certain esubitam@equus-kentucky.com.



The email goes on further to deceive the recipient that they are actually receiving the email alert because of this line:

You have agreed to receive this email from CNN.com as a result of your CNN.com preference settings.

To manage your settings click here.

To alter your alert criteria or frequency or to unsubscribe from receiving custom email alerts, click here.

As always, the email has edit your subscription and unsubscribe links but this time it even provides links to 2008 Cable News Network's supposed privacy policy and terms.

So why not click the links? According to mxlab, the links will lead you to a website where you may download a malicious file adobe_flash.exe.

http://blog.mxlab.be/2008/08/08/cnn-alerts-my-custom-alert-malware/

http://malwaredatabase.net/blog/index.php/2008/08/08/cnn-alerts-my-custom-alert-new/