CNN spam

I've been seeing some CNN spam the past few days, that is, spam in the form of breaking news stories from CNN.com.  Below is a sample:

image

These all look like legitimate news stories, and indeed, they probably are taken straight from an actual CNN news bulletin (I don't subscribe so I wouldn't know).  Indeed, the unsubscribe information and Terms of Use actually link to actual CNN unsubscribe pages.  However, if you mouse-over all of the news links, they go to a spam web page wherein the payload is either a spam advertisement or you click on another link to download a file and flip your computer into a botnet.

This is just another spam message disguised as a legitimate entity.  Technically, this is not phishing, it is spoofing.  It's certainly a clever looking one, to be sure, as it appears legitimate.