Ambush! - The Online Geek Community

Computer Related => Security => Topic started by: ZWarrior on August 09, 2008, 10:34:25 PM

Title: Virus Alert - "CNN Alerts: My Custom Alert"
Post by: ZWarrior on August 09, 2008, 10:34:25 PM
There is an email that is passing around that says it is from CNN Alerts, but is actually a virus.  The links in the email will cause you to open a page that will inject a virus into your system.  They use a scrape of the current days news headlines from CNN, and the Full Story link is the only link that is modified.  Very sneaky, but VERY dangerous.

Quote
Alert Name: My Custom Alert

North Korea's nuke aimed at Washington discovered.
Fri, 8 Aug 2008 09:58:48 -0500

FULL STORY


--------------------------------------------------------------------------------
You have agreed to receive this email from CNN.com as a result of your CNN.com preference settings.
To manage your settings click here.
To alter your alert criteria or frequency or to unsubscribe from receiving custom email alerts, click here.


--------------------------------------------------------------------------------

Cable News Network. One CNN Center, Atlanta, Georgia 30303
© 2008 Cable News Network.
A Time Warner Company
All Rights Reserved.
View our privacy policy and terms.

Here are the headers:

Quote
Return-path: <magadale1973@edgaronline.com>
Envelope-to: my email address
Delivery-date: Fri, 08 Aug 2008 09:58:45 -0500
Received: from mail.temco1.com ([74.93.78.170])
   by mexico.nswebhost.com with esmtp (Exim 4.69)
   (envelope-from <magadale1973@edgaronline.com>)
   id 1KRTQT-0003nL-H3
   for my email address; Fri, 08 Aug 2008 09:58:45 -0500
From: CNN Alerts <magadale1973@edgaronline.com>
Reply-To: magadale1973@edgaronline.com
To: my email address
Subject: CNN Alerts: My Custom Alert
MIME-version: 1.0
Content-Type: TEXT/HTML; charset=US-ASCII
X-ClamAntiVirus-Scanner: This mail is clean
Title: Re: Virus Alert - "CNN Alerts: My Custom Alert"
Post by: Mr_Anderson on August 10, 2008, 09:22:17 AM
Saw your post last night and I just got this email this morning. Figured its the same thing, just different story.

Quote
CNN Alerts: My Custom Alert
Sunday, August 10, 2008 4:34 AM
From:
"CNN Alerts" <anioju_1990@putnam.com>

   Your E-Mail Alerts
Alert Name: My Custom Alert

Actor Freeman 'in divorce action'
Sun, 10 Aug 2008 12:34:53 +0300

FULL STORY

You have agreed to receive this email from CNN.com as a result of your CNN.com preference settings.
To manage your settings click here.
To alter your alert criteria or frequency or to unsubscribe from receiving custom email alerts, click here.

Cable News Network. One CNN Center, Atlanta, Georgia 30303
© 2008 Cable News Network.
A Time Warner Company
All Rights Reserved.
View our privacy policy and terms.

Title: Re: Virus Alert - "CNN Alerts: My Custom Alert"
Post by: ZWarrior on August 10, 2008, 07:53:54 PM
Yep, they scrape the headlines everyday.