[Donna]

What we have today in the malware SPAM watch is another fake email entitled "CNN Alerts: My Custom Alert"

The preview of the emails:

Quote

Alert Name: My Custom Alert

Funniest commercials ever
Fri, 8 Aug 2008 12:51:23 +05-30

FULL STORY

________________________________________
You have agreed to receive this email from CNN.com as a result of your CNN.com preference settings.
To manage your settings click here.
To alter your alert criteria or frequency or to unsubscribe from receiving custom email alerts, click here.
________________________________________
Cable News Network. One CNN Center, Atlanta, Georgia 30303
© 2008 Cable News Network.
A Time Warner Company
All Rights Reserved.
View our privacy policy and terms.

The link is not visible as usual unless you will hover your mouse or copy the hyperlink:

http://alkion.com.ua/cnnplus.html
http://www.worknet.ru/cnnplus.html
http://www.jazzfoto.ru/cnnplus.html

When a user mistakenly click the link to read a full story or CNN article:



It will offer adobe_flash.exe



17 out of 36 malware scanners will detect the file as malicious:



http://www.virustotal.com/analisis/4e5d2e9...deb94af741a23ee

Don't click to avoid infection!

[lithium]

It's important to note that we have found these malicious links on blogspot pages. More information can be found here --> http://malwaredatabase.net/blog/index.php/...stom-alert-new/

Donna, on Aug 8 2008, 09:00 AM, said:

What we have today in the malware SPAM watch is another fake email entitled "CNN Alerts: My Custom Alert"
{snip}

[Donna]

Thanks for joining us here in CoU lithium!
The SPAM with CNN Alerts: My Alerts are in the wild now. Hotmail, Yahoo and Gmail accounts here got it also and there's 5 to 10 in some accounts.

[Larry38]

Thanks Donna.

Got one this morning on my OE mail and promptly deleted it. Don't know how it got past my ISP's security, very few ever make it to my OE, they get put in a Postini box.

[Donna]

Just an update guys. This CNN Alerts: My Custom Alert is still pouring in mailboxes and it is now showing this link:

http://www.dbmonline.com/cnnlast.html

cnnlast.html --> hopefully that their last campaign!

[Donna]

Off-topic: There's a thread for you Larry at Corkboard forum.