Posted on 12/02/2008 2:23:32 PM PST by Cindy
Note: The following text is a quote:
Holiday Season Cyber Scammers Target Victims
The FBI is reminding people this holiday season that cyber criminals continue to aggressively seek ways to steal money and personal information. Scammers are using several techniques to fool potential victims including sending unsolicited e-mails that contain attachments such as electronic greeting cards containing malware (malicious software), setting up spoofing websites that look like legitimate commercial sites, and unleashing phishing and vishing attacks where individuals receive e-mails asking for personal data.
“These cyber scammers will do whatever they can to steal your money and personal information this holiday season and are trying many different ways to commit these crimes. The best way to protect yourself is to report these scams to law enforcement or the Internet Crime Complaint Center, IC3," said Shawn Henry, Assistant Director, FBI Cyber Division, Washington, D.C.
In the greeting card scam, the cards, which are also referred to as e-cards or postcards, are being sent via spam. Like many other Internet fraud schemes, the criminals use social engineering tactics to entice the victim, claiming the card is from a family member or friend. Although there have been variations in the spam message and attached malware, generally the spam directs the recipient to click the link provided in the e-mail to view the e-card. Upon clicking the link, the recipient is unknowingly taken to a malicious webpage.
Spoofing scams are when criminals create a false or shadow copy of a real website or e-mail in a way that misleads the recipient. All network traffic between the victim's browser and the shadow page are sent through the spoofer's machin e. This allows the spoofer to acquire personal information, such as passwords, credit card numbers, and account numbers.
Even though the e-mail looks like the real thing, complete with authentic logos and working web links, it's a fak e. The website where you're told to enter your account information is also fak e. In some instances, really slick spoofers direct you to the genuine website, then pop up a window over the site that captures your personal information. The information entered does not go to the legitimate site, but rather to the spoofer's account. The information you entered will most likely be sold to criminals, who'll use it to ruin your credit and drain your account.
In phishing and vishing attacks, individuals report receiving e-mails or text messages indicating a problem with their account. They are directed to follow the link provided in the message to update their account or correct the problem. The link actually directs the individuals to a fraudulent website that looks legitimate where their personal information, such as account number and PIN, is compromised.
Other reported scams have included victims receiving an e-mail message asking them to complete an online survey. At the end of the survey, they are asked for their personal account information to allow funds to be credited to the account in appreciation for completing the survey. Providing this information will allow criminals to compromise the account.
Here are some tips you can use to avoid becoming a victim of cyber fraud:
Do not respond to unsolicited (spam) e-mail.
Do not click on links contained within an unsolicited e-mail.
Be cautious of e-mail claiming to contain pictures in attached files, as the files may contain viruses. Only open attachments from known senders. Avoid filling out forms in e-mail messages that ask for personal information.
Always compare the link in the e-mail to the link that you are actually directed to.
Log on to the official website, instead of "linking" to it from an unsolicited e-mail.
Contact the actual business that supposedly sent the e-mail to verify if the e-mail is genuine.
To receive the latest information about cyber scams please go to the FBI website and sign up for e-mail alerts by clicking on one of the red envelopes. If you have received a scam e-mail, please notify the IC3 by filing a complaint at www.ic3.gov. For more information on e-scams, please visit the FBI's New E-Scams and Warnings webpage.
I just received a “Hallmark Card” with an attached zip file. Deleted immediately. Beware.
When it comes to things like attachments, a LOT of paranoia is a very good position.
Although I know I must be careful, just a quick note:
I used to agressively use Adaware. I had to. It was amazing how much stuff it constantly found and cleaned. Then, about two years ago, I started using firefox. Haven’t had a problem since. I don’t even use adawar any more.
***I just received a “Hallmark Card” with an attached zip file. Deleted immediately. Beware.***
What’s an “attached zip file”? I never open attached files unless my mailer says it’s OK, but I don’t know what a zip file is.
That's the noise it makes when you send it to the recycle bin.
I guess I’m not very popular. I only get these kinds of emails from my good buddies in Nigeria.
Smiling at you...be thankful.
A zip file is a type of archive file.
An archive file is one which contains one or more files within it, typically with data compression. They make sending multiple files much simpler, because it can be done with a single file instead. They also make it faster, because the data compression makes the overall file size smaller, so it takes less room on a drive and requires less time to send over the Internet.
Zip archives are the most common type of archive file for Windows. There are many other, less common types too, with file extensions to differentiate them (CAB, RAR, etc.)
For a good, free archive program which handles ZIP and every other kind of archive file I've ever heard of, I recommend 7-Zip ( Download here )
I got one from an FBI agent in Nigeria who assured me it was legitimate. The local FBI office got a big laugh when I called them.
Thanks for your reply about the zip file yesterday.
A zip file is a compressed file that must be opened by Zipware. Zip files have largely been replaced by newer comopression software. Almost without exception, a zip file attached to an email you cannot identify contains a virus.
***A zip file is a compressed file that must be opened by Zipware. Zip files have largely been replaced by newer comopression software. Almost without exception, a zip file attached to an email you cannot identify contains a virus.***
Thank you, pabianice, for the above.
Now, let me see if I understand just what it means. (I wish there were a book called IT Speak for Idiots. I need one.)
I do know that way, way, way back when home computers were new and people paid for their time on the internet by the hour, and it was cheaper by night, that they got compressed files to save the download time, and there was a program to decompress them in the cheaper daytime hours.
But, what I don’t understand is whether my computer would now automatically unzip the zip files without my knowing about it.
I’m concerned because I have a friend who sends me GORGEOUS pix, from various sources. I don’t know what clues to look for to avoid trouble.
By the way, I’m on a Mac if it makes any difference.
I’m no expert, either. However, in my experience, one has to actively unzip a zip file received using the appropriate software. Perhaps another Freeper can tell us if this is always true.
Disclaimer: Opinions posted on Free Republic are those of the individual posters and do not necessarily represent the opinion of Free Republic or its management. All materials posted herein are protected by copyright law and the exemption for fair use of copyrighted works.