Fake CNN site spreads trojans !

An new phishing email is circulated in the internet, which looks like from CNN website. But it is not so. Its a phishing email that links to a fake CNN website offerring an video content of  Israel-Hamas conflict, but instead hosts a trojan that can steal sensitive informations from the user who clicked it.

RSA, An security Divison of EMC has written in their blog about this issue. When someone clicks on the video, it throw an error message stating “Download the latest Adobe flash player”. When the user clicks the link, it redirects to a site which will download a trojan on the computer. This trojan is a SSL stealer, which can steal the sensitive informations.

SSL stealer, tracks the encrypted data transferred between the local computer and known financial websites. The tracked/stealed informations are then relayed to the third party, said Sam Curry,vice president of product management and strategy at RSA.

RSA discovered the attack early on wednesday and has worked with others to get the fake site shut down. At a peak on Thursday as many as 80,000 of the phishing e-mails were being sent out, according to Curry.