August 26, 2004 (Computerworld) --
Using new techniques to trick users into opening misleading, fraudulent and potentially harmful messages, spammers have recently targeted Google, the Olympic games and US Bank, according to SurfControl PLC, a vendor of Web and e-mail filtering software. "There is greater awareness of the risks associated with spam and e-mail, so spammers must continually create new techniques to trick end users," Susan Larson, vice president of global content at Scotts Valley, Calif.-based SurfControl, said in a statement. "Companies should be on the lookout for these new techniques and others as they emerge." SurfControl said the Google scam, discovered this week, appears in in-boxes with the subject line "Google, #1 Search Engine." The e-mail asks users to download the latest Google tool bar to stop pop-up ads and spyware and then directs them to a link to download the tool bar executable. However, this download is most likely a virus-infected file, according to SurfControl. At least two aspects of the e-mail indicated it was a hoax, SurfControl said. First, the sender address was from an individual, rather than Google. Second, the IP address for the tool bar download matches that of a suspicious Web site that sells "The Essential Underground Handbook," a guide to get-rich-quick schemes and other forms of fraud, according to SurfControl. SurfControl's research team also said spammers are increasingly embedding images into their messages rather than using HTML, which allows them to work around spam protections that can block HTML-based graphics offered in Microsoft Outlook. And since the text is all part of the embedded image, this techniques also bypasses the text-scanning abilities of traditional antispam filters, the company said. SurfControl said this technique was found in three spam messages this week, including one that appeared to spoof US Bank as part of a phishing scam. SurfControl also discovered a scam using excitement around the 2004 Olympic Games to help the scammer circumvent new federal antispam law. With subject lines including "Olympic Games," "Olympic Medals," "ATHENS 2004" and "ATHENS RANKS," the message appeared to provide the latest Olympic medal tallies. However, directly beneath the tallies was the name of a company "sponsoring" the information -- with a link to an advertisement for Viagra.
"Welcome to a special IT Blogwatch EXTRA: as Richi Jennings watches bloggers' reactions to the Russian hackers who claim to..."
Read more...
"As if taxpayers needed another reason to scorn the IRS. I read yesterday that the inspector general review of several..."
Read more... Read more Security posts or See all Blogs
One positive development stemming from the collapse of Wall Street may be a boost in interest in computer science and IT careers among students who were previously interested in financial services jobs.
Virtualization: Simplify. Automate. Lower Costs. Watch this complimentary webcast today! Go to the webcast
Computerworld Executive Bulletin: Building a Robust Antivirus Defense
Download this Executive Bulletin (a $49.95 value) for free, compliments of MessageLabs. (Source: MessageLabs) Antivirus software alone isn't enough to prevent today's speedy, sophisticated virus attacks. Security managers should consider multitiered approaches that include behavior scanning, appliances that check e-mail for worms, and restricting user access to dangerous Web sites. Download this Executive Bulletin (a $49.95 value) for free, compliments of MessageLabs, to learn more. Download this executive briefing
White Papers
Read up on the latest ideas and technologies from companies that sell hardware, software and services.
Quick Sizing Guide for SAS Grid Running on HP BladeSystems and EVA Storage
Download this white paper today! (Source: HP) Designed for CIOs, IT managers, data center managers and grid computing architects seeking to improve performance, SAS Grid Computing on the HP BladeSystem c-Class helps accelerate growth and mitigate risks with a simplified, consolidated infrastructure that's agile enough to efficiently handle change. SAS Grid Manager on HP BladeSystem can lower costs through automation, virtualization and improved IT efficiency. Download this white paper
Go Green with Webroot® Perimeter Security SaaS! Webroot Perimeter Security SaaS is a powerful alternative to obsolete on-premise hardware based security solutions. SaaS allows businesses to obtain flexible protection through an expert security provider, solving the problems caused by software, hardware and appliance solutions. Benefits include easier manageability, better protection and guaranteed performance all at a lower cost. Register for your free copy of the "Why Security SaaS Makes Sense" whitepaper and Go Green with Webroot! Download this white paper now!
In Security Stripping away the trappings of applications, systems and networks, information is the core asset of most organizations. Our columnist describes how asserting the importance of information governance is crucial to making that asset tangible, addressable and protected.
Click here to read the latest column by Jon Espenschied
Protecting Exchange While it was once just a convenient way for employees to communicate internally, today e-mail systems like Exchange are tightly integrated with other business applications and are one of the primary methods for communicating with current and prospective customers. Protecting Exchange against costly downtime has become a top priority for more IT departments. So how do you ensure that your Exchange environment is always protected? Download this
white paper now!
The Spy Files For Congress to do anything that helps protect consumers and the critical Internet infrastructure as a whole, it must pass laws that require proactive processes to protect computers, not that tell people how to deal with the resulting mess, says Ira Winkler.