The
Meltdown and Spectre bugs have generated a lot of media attention, and users have been urged to update their machines with fixes made available by various vendors.
While some patches have
created more issues than they fixed, we came across a particular one targeted at German users that actually is malware. In fact, German authorities
recently warned about phishing emails trying to take advantage of those infamous bugs.
We identified a recently registered domain that is offering an information page with various links to external resources about Meltdown and Spectre and how it affects processors. While it appears to come from the German Federal Office for Information Security (BSI), this SSL-enabled phishing site is not affiliated with any legitimate or official government entity.
