Linux under threat from 'security update'

Summary:A piece of malware masquerading as an official security update for Red Hat Linux has been reported in the wild for the first time

Linux maker Red Hat is warning users about an email that pretends to be an official security advisory but is actually a phishing-type scam that contains links to malicious code.

The fake email appears to have been sent from "security@redhat.com" and was first spotted on Friday evening with a subject line: "RedHat: Buffer Overflow in 'ls' and 'mkdir'".

The email contains instructions on how to load and install a 'patch', which Red Hat warns is likely to contain malicious code.

Red Hat said its official security messages are sent from secalert@redhat.com and are digitally signed.

According to the company's Web site: "All official updates for Red Hat products are digitally signed and should not be installed unless they are correctly signed and the signature is verified."

Windows users have been successfully targeted a number of times with malware disguised as a fake 'security update'.

One of the most successful worms of 2003, Swen or Gibe.F, was disguised as a Microsoft patch to fix a flaw in Internet Explorer.

Less than four months later the tactic was tried again, but this time the Xombe or Trojan.Xombe worm, posed as a critical update for Windows XP.

The most recent attempt to fool Windows users was the Sober.D worm that masqueraded as a fix for the MyDoom worm.

Munir Kotadia reported from Sydney for ZDNet Australia. For more ZDNet Australia stories, click here.

Topics: Security

About

Munir first became involved with online publishing in 1998 when he joined ZDNet UK and later moved into print publishing as Chief Reporter for IT Week, part of ZDNet UK, a weekly trade newspaper targeted at Enterprise IT managers. He later moved back into online publishing as Senior News Reporter for ZDNet UK.Munir was recognised as Austr... Full Bio

Kick off your day with ZDNet's daily email newsletter. It's the freshest tech news and opinion, served hot. Get it.

Related Stories

The best of ZDNet, delivered

You have been successfully signed up. To sign up for more newsletters or to manage your account, visit the Newsletter Subscription Center.
Subscription failed.