CNN e-mail may contain SSL Stealer Trojan

There is a new Phishing attack that can result in your system becoming a zombie.

According to Nick Farrell in an article over at Fudzilla; people that receive regular CNN news e-mail are finding an e-mail offering a video related to the Israel-Hama conflict actually contains a Trojan.

This Trojan steals personal data by detecting secure communications with known financial institutions and redirecting them to a third-party site.
RSA discovered the attack on Wednesday and have been working to shut the site down.

Read more here.

Victims report that they get an email that links to a fake CNN Web page offering "graphic" video related to the Israel-Hamas conflict. The video is poisoned with a Trojan that steals sensitive data. According to security outfit , RSA an error message pops up urging the visitor to download the latest version of Adobe Flash Player. Clicking on the download link installs an "SSL stealer" Trojan that captures financial and other sensitive information.

It looks for encrypted communications between the computer and known financial institutions and when it sees data being sent it diverts it to a malicious third-party. RSA discovered the attack early on Wednesday and has worked with others to get the fake site shut down.

At a peak on Thursday as many as 80,000 of the phishing e-mails were being sent out.