There's a fake security alert targeting users of Red Hat's Fedora distribution, the company warned in an advisory.
The Linux distributor posted a note on its security updates page to caution users against downloading security updates received via e-mail.
"These e-mails tell users to download and install malicious updates. These Trojan updates contain malicious code designed to compromise the systems they are run on," Red Hat said.
Red Hat, which markets a product line that includes server and embedded operating systems and database applications, made it clear that official messages from its security team are never sent unsolicited and are always digitally signed and sent from the "secalert@redhat.com" address.
"All official updates for Red Hat products are digitally signed and should not be installed unless they are correctly signed and the signature is verified," the company said.
News source:
ieXbeta
Full story:
View Here