Red Hat Hit by Security Update Email Scam
An email purporting to be from Red Hat alerts users to download a patch that actually contains malicious code. Red Hat's Mark Cox notes that security notices from his company "are never sent unsolicited, are always sent from the address [email protected] and are digitally signed by GPG." This kind of ruse has been used many times in the past to try to fool Windows users.