Raleigh, North Carolina-based Red Hat said it had been made aware of the email that pretends to come from the Red Hat Security Team and purports to provide a link to a patch for security problems in Red Hat Linux versions 7.0 to 9.0 and the Fedora Linux project.
Instead, the email links to a fake Fedora site and code that Red Hat said it believes may be malicious. The company pointed out that its security alert emails are always sent from a single email address – secalert@redhat.com – and are digitally signed using the GNU Privacy Guard keys.
