The Anti Phishing Working Group is now lending its expertise to the IRS to help root out online and offline phishing scams that use a combination of e-mails and faxes to steal identities. . Today's most successful online phishing scams use increasingly complex and sneaky tactics to trick people into divulging their banking account numbers, passwords and other personal information to steal people's identities. The link for this article located at eSecurity Planet is no longer available. . Today's most successful online phishing scams use increasingly complex and sneaky tactics to trick p. phishing, working, group, lending, expertise, online. . LinuxSecurity.com Team
Hackers behind a recently detected email attack campaign are exploiting a vulnerability in a Yahoo website to hijack the email accounts of Yahoo users and use them for spam, according to security researchers from antivirus vendor Bitdefender.. The attack begins with users receiving a spam email with their name in the subject line and a short "check out this page" message followed by a bit.ly shortened link. Clicking on the link takes users to a website masquerading as the MSNBC news site that contains an article about how to make money while working from home, the Bitdefender researchers said Wednesday in a blog post. The link for this article located at Network World is no longer available. . The attack begins with users receiving a spam email with their name in the subject line and a short . hackers, behind, recently, detected, email, attack, campaign, exploiting, vulnerability, yahoo. . LinuxSecurity.com Team
Google, Facebook and other big tech companies are jointly designing a system for combating e-mail scams known as phishing. Such scams try to trick people into giving away passwords and other personal information by sending e-mails that look as if they come from a legitimate bank, retailer or other business. . When Bank of America customers see e-mails that appear to come from the bank, they might click on a link that takes them to a fake site mimicking the real Bank of America's. There, they might enter personal details, which scam artists can capture and use for fraud. The link for this article located at USA Today is no longer available. . Major tech companies collaborate to develop strategies that combat online fraud, safeguarding users' confidential information and data from malicious attacks.. Phishing Protection, Email Security Solutions, Tech Collaboration. . LinuxSecurity.com Team
Researchers at SecureWorks have uncovered a new type of phishing attack that tries to trick victims into forwarding their telephone calls to the attacker to thwart attempts by a bank to detect fraud. The attack, found by the Atlanta-based security vendor this week, begins with an e-mail sent from the phisher telling the potential victim their bank needs to verify their phone number immediately, and their account will be suspended if they do not confirm the number. The victim is told to confirm their number by dialing *72 and then another number, effectively forwarding their calls to the phisher's telephone. . After going through this process, the victim is asked in the e-mail to update their personal information, such as bank account and Social Security numbers. If the victim's bank calls to question an unusual transaction while the calls are being forwarded, the phisher need only confirm the illegal transaction is legitimate, SecureWorks researcher Don Jackson wrote on the company's Web site. The link for this article located at eWeek is no longer available. . After going through this process, the victim is asked in the e-mail to update their personal informa. researchers, secureworks, uncovered, phishing, attack, tries, trick, victims. . LinuxSecurity.com Team
Peter Francis-Macrae, 23, of St Neots, Cambridgeshire, was jailed at Peterborough Crown Court this week after being found guilty of fraudulent trading, threatening to destroy or damage property, making threats to kill, and blackmail. In a six-week trial, the court heard how Francis-Macrae had tricked thousands of businesses into sending him money to register a dot-eu domain name on their behalf. . He sent fraudulent e-mails to companies claiming they had to pay a renewal fee to avoid losing their existing domain names. Businesses which complained said Francis-Macrae bombarded them with a glut of further e-mails, and police and trading standards officers who investigated were threatened with petrol-bombing, the court was told. The link for this article located at ComputerWeekly.co.uk is no longer available. . Oliver Jenkins-Smith duped businesses into shelling out cash for fake subscription updates, now imprisoned.. Fraudulent Trading, Email Scams, Domain Scam, UK Court Case. . LinuxSecurity.com Team
Most of us know by now not to give out our passwords, ATM PINs, or other secret information when requested by e-mail. But an increasing number of people are giving out that information, even those of us who should know better. . . . . Most of us know by now not to give out our passwords, ATM PINs, or other secret information when requested by e-mail. But an increasing number of people are giving out that information, even those of us who should know better. What makes this doubly annoying is that the scam is an old one, and it has nothing to do with technology per se. The technique is called phishing, and some very clever crooks use it. Here's how it works. You put together a bunch of HTML-formatted e-mail messages asking people to reconfirm their account information. The messages look like the real McCoy, including corporate logos and from what at first glance looks like a legitimate e-mail address. The two scams that I got recently were from sites that had the eBay and Citibank logos. Both asked me to "verify my personal information" by clicking on a link in the message that took me to the phished site. Many people have fallen for this scam - including retired police officers and others who have plenty of experience with the criminal mind. It is amazingly easy to pull off - all you need is a dollar and a dream and some good HTML coding skills to lift the appropriate logos from the true corporate sites. Buy a list of a few million e-mail addresses and you are ready to sit back and watch those passwords roll in, and soon you will have access to hundreds of IDs to harvest. The link for this article located at SecurityPipeline is no longer available. . Explore the surge of online fraud and discover effective strategies to safeguard your personal data on the internet.. Phishing Scams, Identity Theft, Online Security, Scam Prevention, Email Protection. . LinuxSecurity.com Team
Not all people that send undesirable email (spam) are the same. Their motives differ as greatly as their tools and technical abilities. This document uncovers a spam gang who seeks to acquire your banking information, and the response from one of the targeted victims: Citibank. . .. Not all people that send undesirable email (spam) are the same. Their motives differ as greatly as their tools and technical abilities. This document uncovers a spam gang who seeks to acquire your banking information, and the response from one of the targeted victims: Citibank . This document describes the unique bulk-mailing tool used for recent rash of financial email scams. These scams target financial entities such as Citibank, Wells Fargo, Halifax Bank, eBay, and Yahoo. Only one specific spam gang uses this tool for these financial scams. This spam gang started slow with only a few members, but has increased in both gang membership and spam volume. All emails and headers are provided unmodified with the following exception: all personal information has been modified to protect the identity of the recipient. These modifications are denoted with bold and underlined typeset. Every effort has been made to retain the same data format without disclosing personal information. For data taken from the public domain, such as newsgroup postings and messages from open forums, no effort has been made to modify the data or protect the publicly disclosed recipient. The link for this article located at SecurityFocus is no longer available. . Explore the various agendas propelling phishing emails aimed at acquiring financial data, exemplified by a scenario involving Citibank.. Email Scam, Financial Phishing, Banking Fraud, Cybersecurity Threat, Information Theft. . LinuxSecurity.com Team
The FTC's operation began in 2000, when it sent 1,000 spammers letters to warn them that a particular e-mail chain letter scheme they were involved in was illegal. Chain letters that promise money or other value to the recipient in exchange . . . . The FTC's operation began in 2000, when it sent 1,000 spammers letters to warn them that a particular e-mail chain letter scheme they were involved in was illegal. Chain letters that promise money or other value to the recipient in exchange for a small payment violate federal law, said Eileen Harrington, the FTC's associate director for marketing practices. In 2001, the agency searched its own junk e-mail database, comprised of about 8.3 million messages forwarded by consumers, and found more than 2,000 people still involved in the chain mail scam. The link for this article located at IDG is no longer available. . Over the years, the FTC has made notable progress in combating email scams, launching initiatives to raise consumer awareness and enforce regulations against fraud.. FTC Initiatives, Email Scams, Spam Prevention, Digital Threats. . Anthony Pell
Get the latest Linux and open source security news straight to your inbox.