FBI Warns People about Spear Phishing Scam

On April 1, 2009, the top US investigating agency, FBI, released a public alert as it urged computer users to raise their knowledge about 'spear phishing'.

FBI suggests that spear phishing, which is steadily increasing, works in the same way as the conventional phishing fraud works in which criminals send formal-looking e-mails to users, enticing them to visit a fake website and to craftily get them to enter their personal information. Nonetheless, these scams are essentially targeted as well as present more convincing reasons to trap victims.

Instead of releasing bulk e-mail messages in anticipation of trapping a small number of victims, scammers behind the spear phishing distribute such messages to only a limited number of people who are similar in some respect. For instance, the probable victims might be employed at a common organization, transacting at a common bank, or purchasing from a common online site.

Moreover, spear phishers could lure users into downloading malware from the Net by making them click on a link provided in the fraudulent e-mail. This is a particularly useful tool in criminal offenses such as economic spying in which confidential communications and/or trade secrets of the organization are captured. Besides, malicious software can also compromise a user's computer and numerous such compromised computers could be joined to form a network known as 'botnet' with which denial-of-service attacks could be launched.

Thus, FBI asks people to understand that no legitimate agency/organization would ever solicit secret information via e-mails. It further says that users should not click on e-mail links or call at a given phone number, rather use the company's known URL or call at its published number.

The bureau further cautions everyone to protect himself/herself from falling victim to spear phishing scams. While the law enforcement agencies take such phishing crimes very seriously, FBI states it works for cyber investigations in collaboration with partners like the US Secret Service of the Department of Defense.

Lastly, FBI recommends people to go to the Internet Crime Complaint Center as well as Looks-Too-Good-To-Be-True websites to know more about such attacks and to take tips for self-protection.

Related article: FBI’s ICCC Annual Report Discusses Fraudulent and Non-Fraudulent Complaints

» SPAMfighter News - 4/7/2009