A Kaspersky Theat Post blog warns of a phishing scam aimed to infect user computers. Using a fraudulent email from the FDIC many spam filters may let this through being furthered by the content that may alarm many recipients into clicking into it and entering personal information.
As with any and all security measures the first line of action is education. Make sure all your staff, from chef to Chief Executive Officer, are informed of these issues and are educated on procedure. A good rule of thumb is to never enter private information unless you initiate contact. Call your bank at their published number to verify you know you're really talking to them.
"There are reports of phony FDIC notification e-mails tricking computers users into installing the ZBot identity-theft Trojan. The e-mails tell the recipients that their banks have filed for bankruptcy and that the banks' asserts are now under the control of the FDIC. The links offered in the message lead to a page that offers users a chance to see their "personal FDIC insurance file(s)," but which actually installs the Zeus or ZBot Trojan on their PCs. See the FDIC warning."

Comments
Post new comment