[37066] in bugtraq
Fake RedHat - Fedora Security Patch / Trojan Source Code & Analysis
daemon@ATHENA.MIT.EDU (K-OTiK Security)
Mon Oct 25 21:15:31 2004
Date: 25 Oct 2004 19:06:37 -0000
Message-ID: <20041025190637.31428.qmail@www.securityfocus.com>
Content-Type: text/plain
Content-Disposition: inline
Content-Transfer-Encoding: binary
MIME-Version: 1.0
From: K-OTiK Security <Special-Alerts@k-otik.com>
To: bugtraq@securityfocus.com
Emails that pretend to come from the Red Hat Security Team are circulating in the wild. These emails tell users to download and install malicious updates. These trojan updates contain malicious code designed to compromise the systems they are run on.
Code and Analysis :
http://www.k-otik.com/news/FakeRedhatPatchAnalysis.txt
Regards.
K-OTik Security Research & Survey Team 24/7
http://www.k-otik.com
http://www.adconsulting.fr