Another Trojan from CNN Alerts: My Custom Alert Email


The spammers who have been sending the CNN.com daily top ten email spam seems to be sending a second wave of malware spams but this time the links really look like they lead to legit CNN links. Just today, I received this CNN alerts: My custom alert email and the supposed news the email brings is really catchy: President Bush withdraws from Iraq. The hoax news title link also looks like a real CNN site: http://www.cnn.com/2008/WORLD/asiapcf/08/07/threat.ap/index.html. Unfortunately, the sender of the email does not really look suspicious because it comes from a certain esubitam@equus-kentucky.com.

CNN Alerts: My Custom Alert

The email goes on further to deceive the recipient that they are actually receiving the email alert because of this line:

You have agreed to receive this email from CNN.com as a result of your CNN.com preference settings.
To manage your settings click here.
To alter your alert criteria or frequency or to unsubscribe from receiving custom email alerts, click here.

As always, the email has edit your subscription and unsubscribe links but this time it even provides links to 2008 Cable News Network’s supposed privacy policy and terms.

So why not click the links? According to mxlab, the links will lead you to a website where you may download a malicious file adobe_flash.exe.

9 Comments;

  1. Blogspot Blogs, Google Ads used to Spread Malwares
    6:58 am on August 9th, 2008

    [...] Another Trojan from CNN Alerts: My Custom Alert Email [...]

  2. M John Courtis
    9:02 am on August 10th, 2008

    I’ve tried everything to stop the CNN Alert messages from getting into my inbox but in the end there was only one way I could stop them and believe me there were many hundreds of them. I had to create a message rule to delete any message with CNN in the subject, deleting ‘CNN Alerts’ did not for some reason work.
    Surely there must be someone out there who can stop these unwanted emails that appear to be getting worse in effect and more nemerous. Maybe it should be up to the ISPs to fix this problem as they have a vested interest.
    JohnC

  3. W. Adell
    9:18 pm on August 10th, 2008

    I can not believe I clicked on that stupid link and infected my system; I know better but it was after mid-night…lol I am attempting the following

    http://www.411-spyware.com/fake-cnn-alerts-my-custom-alert-email

  4. Rhodilee
    7:45 pm on August 11th, 2008

    M John,

    I guess, you better ignore these spam messages because the spammers who are sending these messages seem to be good.

  5. david
    5:57 pm on August 12th, 2008

    m john,

    how do you make a message rule to stop these alerts?

    if it’s too complicated to descrtibe in detail, please could you point me in the right direction?

    many thanks,

  6. Unsubscribe from CNN Alerts: Breaking News Spam
    12:25 pm on August 13th, 2008

    [...] Another Trojan from CNN Alerts: My Custom Alert Email [...]

  7. nane
    12:28 pm on August 13th, 2008

    i know what you mean, i tried everything too, but here try this website and see what happens. i just emailed them and i am gonna see what happens

    http://www.cnn.com/feedback/forms/form9e.html

    good luck to you

  8. Peter W
    6:23 pm on August 13th, 2008

    another one now…
    .msnbc.com: BREAKING NEWS: Microsoft buys over AOL

    Same deal , don’t open…it does the adobe_flash.exe trick

  9. Rhodilee
    7:07 pm on August 13th, 2008

    There is also the BBC News. It seems more spam messages are using news sites

Leave a Reply