Fake Red Hat Alert Making Rounds

Published by: cfz 2009-01-08

Secret lovers. Hidden bank accounts. And still no sign of a plane ::
Jul 30, 2008 Did Richard Branson's balloon buddy fake his death? By Annette Witheridge and joined forces on several round-the-world balloon attempts.
http://www.dailymail.co.uk/news/article-1039731/Secret-lovers-Hidden-bank-accounts-And-sign-plane-wreck-Did-Richard-Bransons-balloon-buddy-fake-death.htmlHOME

There's a fake security alert targeting users of Red Hat's

US-CERT: New Spear-Phishing Attack Hitting US Corporate Executives::
US-CERT reports a rather pernicious spear-phishing attack making the rounds via email that claim to be federal delivered subpoenas.
http://infosecurity.us/?p=7HOME

mini railway uk mini rain drum mini rain gutter mini rain gutters ::
red skirt mini red sox flags mini red top hat uk mini red velvet cupcake .. round ice making trays mini round lens reading glasses mini round lounge
http://fiko4.net/73955/HOME

Fedora distribution, the company warned in an advisory.

The Linux distributor posted a note on its security updates page to caution users against downloading security updates received via e-mail.

"These e-mails tell users to download and install malicious updates. These Trojan updates contain malicious code designed to compromise the systems they are run on," Red Hat said.

Red Hat, which markets a product line that includes server and embedded operating systems and database applications, made it clear that official messages from its security team are never sent unsolicited and are always digitally signed and sent from the "secalert@redhat.com" address.

Third Reich.ca - Historical Collectables and Memorabilia::
A fake may have red enamel that is more opaque. The letter "O" should be almost perfectly round and the "S" slightly squashed in appearance.
http://www.thirdreich.ca/heagles.phpHOME

Why is there a red X next to topics I make? - the wire - play.tm::
Fake Red Hat Alert Making Rounds. Unknown attacker sends spam messages with a malicious file masquerading as a Red Hat 25 October 2004Similar
http://play.tm/wire/cluster/559926HOME

"All official updates for Red Hat products are digitally signed and should not be installed unless they are correctly signed and the signature is verified," the company said.

Anti-virus firm F-Secure also put out a notice for the fake alerts, which uses the spam technique to try to get Fedora users to download a malicious root kit. F-Secure Director of Anti-Virus Research Mikko Hyponnen said the attacker registered the "fedora-redhat.com" domain, which is almost identical to the official "fedora.redhat.com" URL.

Eyebeam reBlog: trotts Archives::
this “hack” is making the rounds, so i wanted to get it up here. with usb drives getting smaller and Beware 'Fedora-Redhat' Fake Security Alert
http://www.eyebeam.org/reblog/archives/rebloggers/trotts.htmlHOME

Hyponnen said a large spam run was then engineered targeting Linux users with a message that claimed there was a security flaw in the Linux OS and that a fix was available from the fake URL.

It is not the first time that attackers have used e-mail spam to spread malicious files via fake software security alerts. Last September, a mass-mailing virus masquerading as a security patch from Microsoft was being spread via e-mail with the ability to steal account information and e-mail server details from infected systems.