From: Klein, Marc
Sent: Thursday, December 13, 2007 8:42 AM
To: All Public Safety
Subject: Security Awareness - New and Old E-mail Hoaxes
The following is a list of both old and new E-mail scams and hoaxes that you should be aware of so you don't fall for them. You can get more information on each scam or hoax by clicking on the link listed below each one. Have a safe and malware free Holiday Season!
Scams and Hoaxes
Bait: "Merry Christmas Virus" - An email warning that a new and very destructive virus is being distributed as an attachment named "Merry Christmas." Opening the attachment will supposedly activate an "Open Log Fire" that will "burn" the hard drive in your computer and damage it beyond repair. This is another incarnation of a long-running virus hoax email.
More information:
http://www.hoax-slayer.com/merry-christmas-virus-hoax.shtml Bait: Phishers Go "Vishing*" - First, you receive an attention-grabbing email that says: "Please notice that your VISA card is now disabled and you will not be able to use it." Next, you are instructed to call the provided toll-free number to reactivate your credit cards. Then, an interactive voicemail message asks you to key in your card number. The scam is that your card was never deactivated in the first place, and if you fall for the rest, you've revealed your account number to a world of criminals.
More information:
http://news.cincypost.com/apps/pbcs.dll/article?AID=/20071119/NEWS01/711190375*Vishing: Short for voice phishing.
Bait: Phony Complaints - An email addressed to you, and apparently sent by the US Department of Justice (DOJ), or the Better Business Bureau
(BBB) with an attachment that is supposed to contain details about a complaint filed against you or your company. However, the attachment contains malware hidden in screensaver files. A Canadian variation features a scam email from the Canada Revenue Agency (CRA), replete with official logos and an embedded link, on which the recipient is asked to click in order to read the details. However, the link leads to a website infested with malware, and visiting it sets up your computer for a drive-by download.
More information:
http://blog.washingtonpost.com/securityfix/2007/11/a_fresh_round_of_targeted_emai.html?nav=rss_bloghttp://www.marketwire.com/mw/release.do?id=794619 Marc L. Klein
CISO
MN Dept of Public Safety
