Linux Phishing Attack Circulates On Net

KingFish

A fake security bulletin purporting to be from Red Hat resurfaced, warning Linux users of a "critical-critical" security hole.

A security bulletin circulated on the Internet late Friday and warned Linux users of a "critical-critical" security hole that could compromise systems and allow root access to a remote attacker. The message and its "patch" were the return of a phishing hoax aimed at Linux users.

According to the fake security bulletin, the vulnerability was found in fileutils, the package of essential system utilities that manipulate files on a system. It warned of problem distributions including Red Hat versions 7.2 through 9.0, and Fedora Core 1 and Core 2 as well as others. However, the warning said BSD and Solaris platforms were unaffected by the vulnerability.

Welcome to the beginning of the phishmas season. -KF

Source: eWeek

drasnor

What kind of Linux user would fall for that?

-drasnor

Atltais

The sub-average Red Hat user, possibly.

It does too affect Solaris systems, by the way.

Note: It's my machine, and no, nothing really happened to it (Except me deciding to start anew on the recently (then) acquired machine.)