Linux under threat from security update

[Nomad559]

Linux under threat from security update

http://news.zdnet.co.uk/internet/security/0,39020375,39171264,00.htm

A piece of malware masquerading as an official security update for Red Hat Linux has been reported in the wild for the first time

Linux maker Red Hat is warning users about an email that pretends to be an official security advisory but is actually a phishing-type scam that contains links to malicious code.

The fake email appears to have been sent from "[email protected]" and was first spotted on Friday evening with a subject line: "RedHat: Buffer Overflow in 'ls' and 'mkdir'".

The email contains instructions on how to load and install a 'patch', which Red Hat warns is likely to contain malicious code.

------------------------------------------------------------------

Fake email targets Red Hat Linux

http://www.news.com.au/common/story_page/0,4057,11180599%5E15306,00.html

LINUX distributor Red Hat has warned about an email scam designed to lure users of its open source software to download a fake update.

The emails appear to come from Red Hat's security team and urge users to download and run a supposed update from their home directory.

The update appeared to contain malicious code, Red Had said in an online security advisory.

"Official messages from the Red Hat security team are never unsolicited, are always sent from the address [email protected] and are digitally signed by GPG," the advisory said.