IRS Email Warns Of Phishing — Is the Warning Phishing?

Today the IRS issued its Tax Tip 2012-08 warning about phishing scams aimed at US taxpayers.   Subscribers to IRS information services received an email about the warning. This is a screen shot of the email: Is this a real IRS email?  Did you notice these odd things about it? Why would I open such an obviously fake email?  Because it isn't fake -- it is real.  I know it is real because I use the products of Iconix.  This is what my display looks like with SP Guard turned on: The IRS really made spelling errors and the IRS [...]

Apple Phishing Scam Alert

CNET is warning about a phishing scam in which the bad guys are sending emails that are fake billing error notices from Apple. CNET reports that unlike other Apple phishing scams, in this scam the bad guys have created a reasonably convincing fake.  The grammar and spelling are correct and the message is formatted to look like a real Apple message.  The email address that is displayed looks like it could be from Apple -- "appleid@id.apple.com."  However, it isn't real. Following the links will land at a fake Apple website that also looks pretty convincing. The fake Apple website requests your [...]

2017-01-07T17:35:24-05:00December 29th, 2011|Consumers and Email, Iconix Truemark Service, Phishing|

2012 Cyberattacks Predicted by IID

IID has released its predictions of the big cyberattacks for 2012.  Of the 5 predicted cyberthreats, 4 depend upon phishing scams for their evil success. Here's the IID predictions: 1) Phishing - London Summer Olympics cyber attacks — Cybercriminals will try to capitalize on the Olympics by tricking people into installing malware with phishing scams impersonating the Summer Olympics official website and/or official Summer Olympics vendors.  Once malware is on a victim's computer, the miscreants can monitor or control both personal and business computer activity — enabling them to steal data, send spam, and commit fraud. 2) Phishing - Elections altered — [...]

2017-01-09T15:34:20-05:00December 23rd, 2011|Consumers and Email, Phishing, spear phishing|

FBI Denver Cyber Squad Warns of New Phishing Campaign

The FBI Denver Cyber Squad issued the following warning on November 23, 2011: With the holiday shopping season upon us, the FBI Denver Cyber Squad would like to advise citizens of a new spear phishing campaign involving personal and business bank accounts, financial institutions, money mules, and jewelry stores. The campaign involves a variant of the “Zeus” malware called “Gameover.” The spam campaign is pretending to be legitimate e-mails from the National Automated Clearing House Association (NACHA), advising the user there was problem with the ACH transaction at their bank and it was not processed. Once they click on the [...]

2017-01-07T17:35:24-05:00December 2nd, 2011|Consumers and Email, Phishing|

Phishers Use Cyber Monday for Scams

Computerworld reports that cybercriminals are using phishing scams  to rip-off consumers during this holiday shopping season.  The bad guys are using spoofing legitimate messages from real companies in order to deceive consumers.  The criminals are sending fake shipping confirmations, fake Groupon and Living Social offers and fake social traffic.  A common scam is a fake email about problems with a transaction, such as a delivery problem, a canceled order or direct deposit.  Cloudmark has reproduced this example of a fake UPS email: Computerworld quotes Cloudmark engineering director Angela Knox about details of the UPS-based phishing  scam.  This phishing scam lures [...]

2017-01-07T17:35:25-05:00November 29th, 2011|Consumers and Email, Iconix Truemark Service, Phishing|

Xbox Live Phishing Scam — Microsoft Reimburses Ripped-off Users

The Guardian is reporting that Microsoft is giving refunds to Xbox Live subscribers who may have had their credit card information stolen in a phishing scam.   The Guardian describes the scam in its November 22, 2011 edition: Reports are proliferating of Xbox Live users checking the credit card and bank account statements which they use to pay their Xbox Live subscriptions, and discovering payments which they did not make, generally over a period of months, which were used to buy Microsoft Points (the service's currency which enables users to purchase extra downloadable content, games and in-game objects) which were [...]

2017-01-07T17:35:25-05:00November 25th, 2011|Consumers and Email, Iconix Truemark Service, Phishing|

SEC Issues Guidance on Cyber Risk Disclosure

On October 13, 2011, the United States Securities and Exchange Commission (SEC) issued formal guidance on how U.S. publicly traded companies should disclose cybersecurity risks and data exposure.  In the guidance, the SEC states: Depending on the registrant’s particular facts and circumstances, and to the extent material, appropriate disclosures may include: Discussion of aspects of the registrant’s business or operations that give rise to material cybersecurity risks and the potential costs and consequences; To the extent the registrant outsources functions that have material cybersecurity risks, description of those functions and how the registrant addresses those risks; Description of cyber incidents experienced [...]

Hotel Refund Email Scam

Sophos reports on a new email scam.  In this scam, the bad guys are sending emails that claim to offer a refund for erroneous hotel billings. In order to claim the refund, you must use the attached zip file.  The zip file contains malware which loads a Trojan Horse onto your system. This Trojan Horse can be used to take control over your computer, giving the bad guy the ability to steal your personal information or turn your machine in spam zombie. What can you do to protect yourself?  You should use the latest version of a reputable security product [...]

2017-01-07T17:35:27-05:00September 9th, 2011|Consumers and Email, Iconix Truemark Service, Phishing|

Iconix Acquires Exclusive Rights to IP Portfolio of Brandmail Solutions

ICONIX, Inc., the industry leader in visual email solutions, announced today that it it has acquired exclusive rights to the intellectual property portfolio of Brandmail Solutions. This acquisition provides Iconix with technology that will enable rapid, large-scale deployment of services that visually identify legitimate messages, thus protecting users and brands from phishing attacks and increasing user engagement with email. "With the recent wave of data breaches and increased spear-phishing threat to consumers and enterprises, the need for a simple, intuitive indicator of trusted email is greater than ever," said Jeff Wilbur, vice-president of marketing at Iconix.  "The Brandmail technology dovetails [...]