LinkedIn users being targeted by fake photo email

Researchers at security firm Sophos are warning LinkedIn users about a click-the-pic phishing scam delivering the BlackHole exploit kit. Graham Cluley, senior technology consultant at Sophos, said in a blog post Friday that users were redirected to a Russian website hosting the BlackHole exploit kit if they clicked “photos” that were attached in spurious emails. Victims are being targeted by emails that appear to come from a LinkedIn account for member services. The BlackHole toolkit infects computers by exploiting existing vulnerabilities.