February 23, 2005 (Computerworld) --
A fake e-mail that purports to be from the FBI is circulating on the Internet with a computer virus as its payload. In an announcement yesterday, the FBI warned that the fake unsolicited e-mail tells users that "their Internet use has been monitored by the FBI's Internet Fraud Complaint Center and that they have accessed illegal Web sites." The bogus message then asks recipients to click on an attachment and answer some questions about their alleged illegal Internet use. But rather than being a questionnaire, the attachment contains a virus that infects the recipient's computer, according to the agency. It wasn't immediately clear what the virus does once it has infected a computer. Paul Bresson, an FBI spokesman, today said that the agency discovered the fake e-mail over the weekend after several recipients of the messages notified the FBI. Bresson said he didn't know exactly how many complaints were received. The latest scam appears to be the first time a virus has been distributed through an e-mail allegedly from the FBI, he said. A previous scheme involved e-mails that lured recipients to a fake Web site that looked like the FBI's official site, then asked recipients to enter their credit card number and personal information to determine if their card was one that recently had been stolen. The latest message has multiple misspellings and is written in broken English, Bresson said. "The wording is very poor, which helps us," he said. "We're hoping that that flags people that this is not legitimate." The message warns recipients that their Internet use continues to be watched and that the alleged illegal activity should be halted. "If there will be anover [sic] attemption [sic] you will be busted," the message states. Bresson didn't know whether any victims of the scam have provided their credit card numbers or other information. The FBI said that it never sends official unsolicited e-mails to citizens for any reason and that any messages purporting to be from the agency should be ignored. Recipients can also report them to the FBI's Internet Crime Complaint Center. Pete Lindstrom, a security analyst at Spire Security LLC in Malvern, Pa., said fake e-mail messages will continue to be a problem until tighter standards for sending e-mails are adopted by senders and recipients. "The way we use e-mail today, anyone can impersonate anyone else," he said. To stop that, users need to consider using trust certificates for all mail, so recipients know that an incoming message is from a trusted sender. "Folks are going to have to rethink how easy this is [to send and receive mail today], which made it very functionalin the past," Lindstrom said, noting that the technical know-how to make mail more secure is already here. "It becomes more of a question of willingness to do it," he said.
Moving to Windows Vista: The Promise, The Reality View this exclusive webcast today! Go to the webcast
Managing Mobile Data with Endpoint Security for Laptops
Download this white paper now, compliments of Computerworld and Absolute Software. (Source: Absolute Software) A NetworkWorld survey of IT professionals found that only 1 in 100 employees consistently follow data security policy. This paper outlines endpoint security for laptops that restricts data access beyond encryption to safeguard against insider threats and user error.Read this whitepaper to learn lessons from recent data breaches, limitations of traditional data security, and how to remotely wipe out data and monitor computers that go off the network. Download this executive briefing
Record Capacity for Microsoft? Exchange 2007 With VMware and IBM System x3850 M2
Download this white paper today! (Source: VMware) The more that e-mail becomes an entrenched IT infrastructure application, the more that messaging administrators face numerous--sometimes conflicting--demands in the categories of availability, flexibility and cost. Employing a virtual solution can help avoid expensive over-provisioning of server computing resources, while improving management and disaster recovery. And ultimately, it can more than double the number of supportable Exchange 2007 users, as compared to a non-virtualized environment. This whitepaper explains how to break down the scalability barrier and respond faster to your mail system needs. Download this white paper
White Papers
Read up on the latest ideas and technologies from companies that sell hardware, software and services.
XenServer FREE trial
Citrix XenServer is the simplest and most effective way to virtualize and provision servers. XenServer combines comprehensive server virtualization capabilities with unparalleled scalability, performance, economics, and ease-of-use. Based on the open source Xen hypervisor, XenServer delivers fast performance, easy management, and advanced features such as live migration.
See your link here
Subscribe to
Computerworld 
or
Other Spam, Malware and Vulnerabilities Stories
Moving to Windows Vista: The Promise, The Reality
Download this white paper now, compliments of Computerworld and Absolute Software. 
Download this white paper today!
Read up on the latest ideas and technologies from companies that sell hardware, software and services.
Computerworld