CNN brand abused

Saudi network security provider IT Matrix has put out an advisory through its InfoMatrix security alert service concerning e-mail with the subject line “CNN.com Daily Top 10”. According to the alert, tens of thousands of Internet users in the Kingdom have received what looks like an innocuous missive from CNN.com, offering links to the “Daily Top 10” stories and videos. In the past two days, e-mail has also begun circulating with the title “CNN Alerts: My Custom Alert”.

Flag these e-mails as spam, and do not click the links inside. The links will direct you to a malware website where an attempt will be made to install dangerous software on your PC. If you do click one of the links you’ll get a CNN-branded video player and an error message with a notice: “Video ActiveX Object Error. Your browser cannot play this video file.” The message then prompts you to install an ActiveX Object ... which, of course, is actually a Trojan horse. CNN is not affiliated with the threat. It doesn’t operate the website in question and the messages are being sent from randomized e-mail accounts, likely on infected machines.

More cards for ID program

LaserCard Corporation has received a follow-on purchase order valued at $2.8 million to supply secure identity cards for Saudi Arabia’s national ID card program. This brings the total value of orders received for the program since April 1, 2008, to $7.4 million. The $2.8 million order is for the continued supply of optical smart cards to be issued via offices in cities throughout Saudi Arabia. Deliveries under the order are expected to be completed during the current calendar year.

Saudi Arabia’s national ID card is a wallet-sized card that features LaserCard’s optical memory security and a contact chip on one side, and the cardholder’s picture and demographic information on the other.

The optical memory adds a high level of digital and visual security to the card. As well as securely storing the cardholder’s digital information, such as demographics and facial image, the optical stripe is permanently marked with visible cardholder identity information for ease and confidence of visual verification.

This blending of digital and visual security is unique among all card-based data storage technologies. The card is used for secure personal identification and to manage the provision of citizen services through the country’s e-government initiatives.