Hotel Refund Email Scam

Sophos reports on a new email scam.  In this scam, the bad guys are sending emails that claim to offer a refund for erroneous hotel billings. In order to claim the refund, you must use the attached zip file.  The zip file contains malware which loads a Trojan Horse onto your system. This Trojan Horse can be used to take control over your computer, giving the bad guy the ability to steal your personal information or turn your machine in spam zombie. What can you do to protect yourself?  You should use the latest version of a reputable security product [...]

2017-01-07T17:35:27-05:00September 9th, 2011|Consumers and Email, Iconix Truemark Service, Phishing|

Jefferson Lab Identified as Cyber-victim

Yesterday, we wrote about the compromise of three U.S. National Laboratories.  Venture Beat has now identified the third facility.  That facility is Jefferson Lab in Newport News, Virginia. On July 6, 2011, General Michael Hayden, USAF Ret., spoke before The Potomac Institute for Policy Studies on cybersecurity.  General Hayden is a former director of the CIA and the NSA.  Discussing the cyber-attacks such as these, General Hayden said, "If we don’t act boldly, something really bad is going to happen.”  Michael Tiffany, Chief Architect at Recursion Ventures, also spoke. He observed, “Today the people who are succeeding at these types of attacks are the ones who [...]

2017-01-07T17:35:27-05:00July 8th, 2011|Phishing, SP Guard|

Iconix Acquires Exclusive Rights to IP Portfolio of Brandmail Solutions

ICONIX, Inc., the industry leader in visual email solutions, announced today that it it has acquired exclusive rights to the intellectual property portfolio of Brandmail Solutions. This acquisition provides Iconix with technology that will enable rapid, large-scale deployment of services that visually identify legitimate messages, thus protecting users and brands from phishing attacks and increasing user engagement with email. "With the recent wave of data breaches and increased spear-phishing threat to consumers and enterprises, the need for a simple, intuitive indicator of trusted email is greater than ever," said Jeff Wilbur, vice-president of marketing at Iconix.  "The Brandmail technology dovetails [...]

HSBC Customers Phished

Naked Security reports on a phishing scam directed at customers of HSBC. Scammers sent out emails which offered the email recipient free tickets to the Wimbledon matches. In order to claim the prize, the attached form had to be completed. The email has some clear signs of being real.  HSBC really sponsors Wimbledon and HSBC really runs a contest to meet Tim Henman.  Unfortunately, the email isn't from HSBC, there are no free tickets and if the form is completed, the recipient's identity is stolen. Naked Security reminds us to always be suspicious of unsolicited emails from your online bank - [...]

2017-01-07T17:35:27-05:00June 17th, 2011|Iconix Truemark Service, Phishing|

Sony PSN email Scam

Electronic Theatre, the gaming publication, reports that scams arising from the security breach of the Sony Playstation Network (PSN) have started. Electronic Theatre reports that soon after the PSN network was compromised, Sony sent out a real email warning.  On May 4, 2011, members to the Electronic Theatre team started receiving additional warning emails which were almost identical to the original messages -- except this time the email contained a link to reset your password.  The password reset page is actually a scam intended to steal your personal information.  While Electronic Theatre does not believe that these email criminals are the same people [...]

2017-01-07T17:35:28-05:00May 13th, 2011|Iconix Truemark Service, Phishing|

Malicious Software Features Usama bin Laden Links to Ensnare Unsuspecting Computer Users

The FBI today (May 3, 2011) issued a warning about emails that feature Usama bin Laden photos or videos but which actually contain malware that will infect your computer.  The FBI warns that viruses are often programmed to steal your personally identifiable information. The FBI offers this advice: Adjust the privacy settings on social networking sites you frequent to make it more difficult for people you know and do not know to post content to your page. Even a “friend” can unknowingly pass on multimedia that’s actually malicious software. Do not agree to download software to view videos. These applications [...]

2017-01-07T17:35:28-05:00May 3rd, 2011|Consumers and Email, Phishing|

Phishing emerges as major corporate security threat

On April 20, 2011, Computer World’s Jaikumar Vijayan reported on the increasing threat of spear-phishing to the enterprise.   The report relates the compromise of Oak Ridge National Laboratory.  Oak Ridge National Laboratory was forced to shut down its email systems and all Internet access for employees on April 15, 2001, following a sophisticated spear-phishing cyberattack.  The Oak Ridge National Laboratory is just one of a series of recent compromises that started with spear-phishing email.  Vijayan reports that the spear-phishing attacks are becoming more sophisticated.  For example, the bad guys are using social networking sites to collect personal information to customize the [...]

2017-01-07T17:35:28-05:00April 22nd, 2011|Phishing, SP Guard, spear phishing|

Epsilon Data Loss — Update

threatpost, the Kaspersky Lab Security News Service, has provided an updated list of the companies that have been affected by the Epsilon data breach: 1-800-FLOWERS AbeBooks Air Miles (Canada) Ameriprise Financial Ann Taylor credit card (provided by WFNNB) Barclay's Bank of Delaware (this breach affects customers     of several private-label Visa credit cards, including BJ's     and L.L. Bean) Beachbody Bebe Stores Best Buy Benefit Cosmetics Brookstone Capital One Chase Citigroup City Market College Board Crucial Dell Dillons Disney Destinations Eddie Bauer Eileen Fisher Ethan Allen Eurosport (Soccer.com) Food 4 Less Fred Meyer Fry's Electronics Hilton Honors program Home Depot [...]

2017-01-07T17:35:28-05:00April 19th, 2011|Consumers and Email, Phishing, SP Guard, spear phishing|

Spear-Phishing. Coming Now To Consumers!

Epsilon’s recent loss of email data to hackers has brought new attention to the problem of spear-phishing.   What is spear-phishing?  In order to answer that question, you need to know what phishing is.  Phishing is email that is designed to appeal to the recipients’ desires, fears and curiosity to get the recipients to act to the recipients’ detriment.  Typically, that action is to click a link that goes to a fake website that asks for information in order to commit identity theft.  Sometimes these emails are very ineffective to the point of being funny.  We are all familiar with the [...]