Fake e-mails delivering virus to users' inboxes, says expert
28 Oct 2009, 1511 Hrs

Add comment          Mail          Print          Write to Editor

Washington, Oct 28 A fake email, apparently from the Federal Deposit Insurance Corporation (FDIC), can steal bank passwords and other sensitive personal information from unsuspecting victims, according to a computer forensic expert.

Gary Warner, the director of research in computer forensics at the University of Alabama at Birmingham (UAB), has said that cyber criminals are sending the spam mails with one of two subject lines-'FDIC has officially named your bank a failed bank' or 'You need to check your Bank Deposit Insurance Coverage'.

He said that the moment the message is opened, the spam asks users to visit a specific Web site, a link to which is included in the message.

Those that follow the link are taken to a page that asks them to click and download a copy of "your personal FDIC insurance file."

"Unfortunately, anyone who clicks that download link will be downloading a version of the Zeus Bot virus, which has the capacity to steal bank passwords and other financial and personal information," said Warner.

Warner and his colleagues in the UAB Spam Data Mine have been tracking the new spam for a number of days and report its delivery volume to be very high.

The spam claims to be from the e-mail address consumeralerts@fdic.gov, which is a real e-mail address used by the FDIC, but has actually been forged by the malware distributors in this situation, said Warner.

"The cyber criminals behind this spam have gone to great lengths to mimic the logos and look of FDIC communications, including going so far as to forge an official FDIC e-mail address in an effort to confuse consumers into following links and downloading harmful programs.

"As is the case with any agency or company e-mail, do not follow links or click downloads embedded in the messages. Instead, visit the site in question through your Web browser and log in as you normally would. If an entity has an important message for you, you'll be able to find it on its Web page.

"Legitimate companies will never ask you to download programs or enter your personal information via an e-mail," he added. (ANI)

Related Latest

Vaccines effective against H1N1 virus mutation, say experts Megan Fox admits creating fake personas Self-declared Nepal expert says he never was a RAW man Common cold virus may stave off swine flu Pak pushing WB to appoint neutral expert over Kishanganga dam dispute with India Gerontologist expert predicts shift in senior American voting bloc When Lindsay Lohan was threatened by fake gun on holiday Clinton met fake Kim Jong-il, claims Japanese academic Fake e-mails delivering virus to users' inboxes, says expert Facebook's latest revamp urges users to reconnect with dead loved ones!

Related Latest

What kind of China at PM's banquet? Security beefed-up in Mumbai ahead of 26/11 anniversary Test match against India starts from scratch, says Sangkkara Sonia Gandhi assures support to wives of Hemant Karkare, Vijay Salaskar Indian sub-continent is prone to nuclear war: Army Chief Chhattisgarh man, a snake venom junkie Centre to set up six Spice Parks Widows of 26/11 martyrs meet Sonia 'Pigeon' McGrath still as miserly and deadly as in his hey-day India -ASEAN free trade agreement to come into force in January 2010

• What kind of China at PM's banquet?
• Security beefed-up in Mumbai ahead of 26/11 anniversary
• Test match against India starts from scratch, says Sangkkara
• Indian sub-continent is prone to nuclear war: Army Chief
• Sonia Gandhi assures support to wives of Hemant Karkare, Vijay Salaskar

• भारतीय क्रिकेट की मजबूत दीवार
• कंगारूओं के आगे ढेर, चीतों से कैसे मुकाबला करेंगें शेर
• Reducing greenhouse gases may not be enough to slow global warming
• बीकानेर महापौर चुनावः एक विश्लेषण
• Deepawali: The Festival Of Lights