A massive new spam attack claiming to be Top 10 lists from CNN but is actually a link to a malware bonanza is getting worse. Security experts say the attackers are sending close to 11 million spams an hour. The sites hosting the malware appear to have been compromised by the attackers as many of the domains in the malcious URLs are legit.

Anyone who clicks on the link in the email is taken to one of the compromised sites, where a pop up informs them that they need to install an update to Adobe Flash. Clicking cancel puts the user in an endless loop with the only way out is to shut down the brower or install the malware. Experts say the attack is unlikely to end anytime soon.