Teknoids

I just sent this on and thought I'd share it here, too. We've already
seen the CNN emails and have had unsuspecting users click the "stories".
The Facebook variant is actually a clever bit of social engineering,
IMO. I'd probably read a story about the FBI and Facebook...
Cyndi

Just in time for the Olympics, there is a new security threat making
it's rounds. Here's what another State sysadmin had to say:

>>>
Beginning on August 5, 2008 reports of mass emails claiming to be from
the CNN.com news Web site began to surface. Currently the subject of the
email is "CNN.com Daily Top 10". These emails are not from CNN, and
contain web links to malicious sites that will attempt to install
malware purporting to be an Adobe Flash Player upgrade. The MS-ISAC has
received reports from multiple states including Michigan, New York,
North Carolina and Wisconsin, indicating their users have received these
emails.

As the 2008 Olympics will be starting Friday, August 8, we anticipate
spammers, phishers, and other online attackers may use bogus
"Olympic-themed" headlines in their scams. We recommend that
organizations use this as an opportunity to remind users to use caution
when handling suspicious or unexpected email messages and URLs.