Saturday, January 10, 2009

Fake CNN site installs trojan thats steals your finicial information

Beware...an email is going around claiming it has a video of the Israel-Hamas conflict which directs the user to a fake CNN site. The site asks you to download adobe flash but this is really a tojan that steals sensitive information from your computer including finicial information. Cnet

A new e-mail that is circulating looks like it comes from CNN and links to a fake CNN Web page offering "graphic" video related to the Israel-Hamas conflict but instead hosts a Trojan that steals sensitive data, RSA said on Thursday.

When someone clicks on the video link on the fake CNN site an error message pops up urging the visitor to download the latest version of Adobe Flash Player. Clicking on the download link installs an "SSL stealer" Trojan that captures financial and other sensitive information, RSA said in a blog.

The Trojan looks for encrypted communications between the computer and known financial institutions and when it sees data being sent it diverts it to a malicious third-party, said Sam Curry, vice president of product management and strategy at RSA.

No comments: