Fake Angelina Jolie CNN Story Contains Malware

//
Angelina Jolie has become the unwitting star of a new malware campaign that might be coming to your email inboxes.
Simone Cecchetti/Corbis

Angelina Jolie hasn't had a blockbuster film in a few years, but she's the unwitting star of a new malware campaign that might be coming to your email inboxes.

Two days ago Forbes named Jolie the highest-paid actress in Hollywood. This new spam campaign, discovered by researchers at ThreatTrack Security Labs, takes advantage of that news to try to trick you into clicking on some malicious links.

Cafe, Mall Music Could Trigger Malware

Fact: If you discover a new species, you get to name it. And instead of naming these new species after themselves, many scientists have taken to the tabloids in search of inspiration.
DCI

The spam comes in the form of an email supposedly from CNN. The subject line is "CNN: Forbes: Angelina Jolie tops list of highest-paid actresses" and the body of the email is a screen capture from the CNN Web page on the story.

Click any of the email's links, however, and you'll be prompted to download a file that looks like an Adobe Flash Player update (named "update_flash_player.exe"). But it's really a piece of malicious software.

Once installed, the software will download another malicious program that ThreatTrack Security identifies as a variant of a Zbot/Zeus, a type of Trojan that steals banking information. [MORE: The 10 Most Dangerous Women Online]

Using current events as linkbait is a tactic known as "social engineering," a term used in technology to describe the use of emotional manipulation to achieve a goal instead of technological savvy. That's exactly what these scammers are doing: By sugar-coating their run-of-the-mill malware with the CNN logo and the promise of celebrity gossip, they're hoping to tempt recipients into a moment of unguarded Internet link-clicking.

Malicious Software Turns Your Cell Phone Against You

The Royal Baby was also recently used as malware linkbait in a very similar scheme, ThreatTrack notes.

Jolie herself has been used as malware linkbait so many times that in 2008 some websites nicknamed her the "Queen of Spam."

Get More from TechNewsDaily

This article originally appeared on TechNewsDaily, a TechMediaNetwork company. Copyright 2013. All rights reserved. This material may not be published, broadcast, rewritten or redistributed.

DISCOVERYnewsletter
 
Invalid Email