Another scam to expose has just landed in my email inbox. Apparantly, a "good citizen" of Malaysia is asking for western union money transfers so he can go help the victims of the recent earthquake in Japan.
If you want to help the victims, please don't do it this way. Instead, contact a reputable charity like the American Red Cross to make your donation.
Otherwise, your wire transfer is just a donation to the scam artist.
Community News You Can Use
Click to read MORE news:
www.GeorgiaFrontPage.com
Twitter: @gafrontpage & @TheGATable @HookedonHistory
www.ArtsAcrossGeorgia.com
Twitter: @artsacrossga, @softnblue, @RimbomboAAG @FayetteFP
Showing posts with label scam. Show all posts
Showing posts with label scam. Show all posts
Friday, April 1, 2011
Wednesday, October 20, 2010
Fraud Advisory for Consumers: Involvement in Criminal Activity through Work from Home Scams
Consumers continue to lose money from work-from-home scams that assist cyber criminals move stolen funds. Worse yet, due to their deliberate or unknowing participation in the scams, these individuals may face criminal charges.
Work-from-home scam victims are often recruited by organized cyber criminals through newspaper ads, online employment services, unsolicited emails or “spam”,¹ and social networking sites advertising work-from-home opportunities. Once recruited, however, rather than becoming an employee of a legitimate business, the consumer is actually a “mule” for cyber criminals who use the consumer’s or other victim's accounts to steal and launder money. In addition, the consumer’s own identity or account may be compromised by the cyber criminals.
Example of a Work-From-Home Scheme:
• An individual applies for a position as a rebate or payments processor² through an online job site or through an unsolicited email.
• As a new employee, the individual is asked to provide his/her bank account information to his/her employer or to establish a new account using information provided by the employer.
• Funds are deposited into the account that the employee is instructed to wire to a third (often
international) account. The employee is instructed to deduct a percentage of the wired
amount as their commission.
• However, rather than processing rebates or processing payments, the individual is actually
participating in a criminal activity by laundering stolen funds through his/her own account or a newly established account.
In February 2010, the U.S. Federal Trade Commission (FTC) coordinated with state law enforcement officials and other federal agencies to announce a sweeping crack down on job and work-from-home fraud schemes fueled by the economic downturn. Individuals who are knowing or unknowing participants in this type of scheme could be prosecuted.
Protect Yourself:
• Be wary of work-from-home opportunities. Research the legitimacy of the company through the Better Business Bureau³ (for US-based companies) or WHOIS/Domain Tools⁴ (for international companies) before providing personal or account information and/or agreeing to work for them. In addition, TrustedSource.org can help you identify companies that may be maliciously sending spam based on the volume of email sent from their Internet Protocol (IP)⁵ addresses. See also the FTC’s recommendations⁶.
• Be cautious about any opportunities offering the chance to work from home with very little work or prior experience. Remember: if it looks too good to be true, it usually is.
• Never pay for the privilege of working for an employer. Be suspicious of opportunities that require you to pay for things up front, such as supplies and other materials.
• Never give your bank account details to anyone unless you know and trust them.
• If you think you may be a victim of one of these scams, contact your financial institution
immediately. Report any suspicious work-from-home offers or activities to the Internet Crime Complaint Center (IC3)⁷ at http://www.ic3.gov/default.aspx.
For more information, visit:
• PhishBucket.org, a nonprofit organization dedicated to protecting job seekers fromfraudulent job offers.
• OnGuardOnline.org. Sponsored by the FTC, this site provides practical tips from the
federal government and the technology industry to help you be on guard against Internet
fraud, secure your computer, and protect your personal information.
• Better Business Bureau, http://www.bbb.org/us/article/work-at-home-schemes-408.
¹ Cyber criminals may also spoof a legitimate business to entice you into opening the email, which may contain a fraudulent application for information or malware.
² Other common job titles for these schemes include trading partner or currency trader.
³ http://www.bbb.org/
⁴http://www.domaintools.com/
⁵An IP address identifies the company’s website host or network interface and location.
⁶http://www.onguardonline.gov/topics/email-scams.aspx#3
⁷The IC3 is a partnership between the Federal Bureau of Investigation (FBI), the National White Collar Crime Center (NW3C), and the Bureau of Justice Assistance (BJA).
-----
Community News You Can Use
Click to read MORE news:
www.GeorgiaFrontPage.com
Twitter: @gafrontpage & @TheGATable @HookedonHistory
www.ArtsAcrossGeorgia.com
Twitter: @artsacrossga, @softnblue, @RimbomboAAG
www.FayetteFrontPage.com
Twitter: @FayetteFP
Work-from-home scam victims are often recruited by organized cyber criminals through newspaper ads, online employment services, unsolicited emails or “spam”,¹ and social networking sites advertising work-from-home opportunities. Once recruited, however, rather than becoming an employee of a legitimate business, the consumer is actually a “mule” for cyber criminals who use the consumer’s or other victim's accounts to steal and launder money. In addition, the consumer’s own identity or account may be compromised by the cyber criminals.
Example of a Work-From-Home Scheme:
• An individual applies for a position as a rebate or payments processor² through an online job site or through an unsolicited email.
• As a new employee, the individual is asked to provide his/her bank account information to his/her employer or to establish a new account using information provided by the employer.
• Funds are deposited into the account that the employee is instructed to wire to a third (often
international) account. The employee is instructed to deduct a percentage of the wired
amount as their commission.
• However, rather than processing rebates or processing payments, the individual is actually
participating in a criminal activity by laundering stolen funds through his/her own account or a newly established account.
In February 2010, the U.S. Federal Trade Commission (FTC) coordinated with state law enforcement officials and other federal agencies to announce a sweeping crack down on job and work-from-home fraud schemes fueled by the economic downturn. Individuals who are knowing or unknowing participants in this type of scheme could be prosecuted.
Protect Yourself:
• Be wary of work-from-home opportunities. Research the legitimacy of the company through the Better Business Bureau³ (for US-based companies) or WHOIS/Domain Tools⁴ (for international companies) before providing personal or account information and/or agreeing to work for them. In addition, TrustedSource.org can help you identify companies that may be maliciously sending spam based on the volume of email sent from their Internet Protocol (IP)⁵ addresses. See also the FTC’s recommendations⁶.
• Be cautious about any opportunities offering the chance to work from home with very little work or prior experience. Remember: if it looks too good to be true, it usually is.
• Never pay for the privilege of working for an employer. Be suspicious of opportunities that require you to pay for things up front, such as supplies and other materials.
• Never give your bank account details to anyone unless you know and trust them.
• If you think you may be a victim of one of these scams, contact your financial institution
immediately. Report any suspicious work-from-home offers or activities to the Internet Crime Complaint Center (IC3)⁷ at http://www.ic3.gov/default.aspx.
For more information, visit:
• PhishBucket.org, a nonprofit organization dedicated to protecting job seekers fromfraudulent job offers.
• OnGuardOnline.org. Sponsored by the FTC, this site provides practical tips from the
federal government and the technology industry to help you be on guard against Internet
fraud, secure your computer, and protect your personal information.
• Better Business Bureau, http://www.bbb.org/us/article/work-at-home-schemes-408.
¹ Cyber criminals may also spoof a legitimate business to entice you into opening the email, which may contain a fraudulent application for information or malware.
² Other common job titles for these schemes include trading partner or currency trader.
³ http://www.bbb.org/
⁴http://www.domaintools.com/
⁵An IP address identifies the company’s website host or network interface and location.
⁶http://www.onguardonline.gov/topics/email-scams.aspx#3
⁷The IC3 is a partnership between the Federal Bureau of Investigation (FBI), the National White Collar Crime Center (NW3C), and the Bureau of Justice Assistance (BJA).
-----
Community News You Can Use
Click to read MORE news:
www.GeorgiaFrontPage.com
Twitter: @gafrontpage & @TheGATable @HookedonHistory
www.ArtsAcrossGeorgia.com
Twitter: @artsacrossga, @softnblue, @RimbomboAAG
www.FayetteFrontPage.com
Twitter: @FayetteFP
Thursday, October 7, 2010
Fake iTunes Bill Can Drain Your Bank Account
The following article is from Eastman's Online Genealogy Newsletter and is copyright by Richard W. Eastman. It is re-published here with the permission of the author. Information about the newsletter is available at http://www.eogn.com.
I received one of these email messages a few days ago. Luckily, Gmail placed it in my spam folder so I didn't see it until today when I went looking for it. You have to hand it to these scam artists: they certainly are clever at devising methods of stealing your money.
I wrote a couple of days ago at http://goo.gl/nvl9 about a "trojan" email message that steals your user IDs and passwords to your online banking account. This new scam is a different Trojan message with a very clever delivery method.
The new scam sends a fake "iTunes receipt" email message to millions of people. The message appears to be completely authentic, except for the price shown in your bill. The message I received was for nearly $1,000. That's part of the trap.
Most people are likely to take action when seeing an "incorrect amount" appear on their bill. (I didn't do that because I never saw the "bill" in my spam folder until I went looking for it later, after reading about the new scam.) Most people will click on the "report a problem" link that is included in the email message. However, that link takes you to a rogue web page that downloads the same Zeus trojan malware as described in the earlier article to your Windows computer. (Linux and Macintosh computers will not be affected.)
The program then waits for the user to log onto a list of targeted banks and financial institutions, and then steals login credentials and other data which are immediately sent to a remote server hosted by cybercriminals. It can also modify, in a user’s browser, the genuine web pages from a bank’s web servers to ask for personal information such as payment card number and PIN, one time passwords, etc.
Panda Labs released a statement explaining the infection process:
"After clicking the link, the victim is asked to download a fake PDF reader. Once installation is complete, the user is redirected to an infected web page containing the Zeus Trojan, which is specifically designed to steal personal data."
Here is the full announcement from Panda Labs:
Massive Phishing Attack Uses iTunes as Lure to Steal Bank Details, Reports PandaLabs
ORLANDO, Fla., Oct. 4 -- PandaLabs, Panda Security's antimalware laboratory, has discovered that Apple's popular iTunes platform has become a major target for hackers looking to steal credit card data from the service's millions of users.
Victims receive a cleverly-crafted email informing them that they have made an expensive purchase on iTunes. The user, having never made the purchase to begin with, is concerned by the email and naturally tries to resolve the problem – in this case by clicking on the proffered (fake) link. An example of this fraudulent iTunes receipt can be seen here: http://www.flickr.com/photos/panda_security/5050360091/
After clicking the link, the victim is asked to download a fake PDF reader. Once installation is complete, the user is redirected to an infected Web page containing the Zeus Trojan, which is specifically designed to steal personal data. This phishing attack was uncovered shortly after a similar phishing attack targeting LinkedIn users appeared last week, which appears to have originated in Russia.
"Phishing is nothing new," said Luis Corrons, Technical Director of PandaLabs. "What never ceases to surprise us is that the techniques used to trick victims continue to be so simple, but the design and content is so very well-orchestrated. It's very easy to fall into the trap. When using services such as iTunes, it is absolutely crucial that users never go to the website via email, but rather from the platform itself where they can verify their account status."
This technique has been reported to the Anti-Phishing Working Group, which has started to block some of the Web addresses linked to in the fake email.
PandaLabs advises all users to be wary of any emails related to iTunes, regardless of how genuine they seem. Users who think they may have been affected are urged to scan their computers thoroughly to locate and remove any possible active threats. [Windows] Users who do not have an antivirus installed can use Panda Cloud Antivirus, a free security service available at www.cloudantivirus.com.
More information is available in the PandaLabs Blog.
About PandaLabs
Since 1990, its mission has been to detect and eliminate new threats as rapidly as possible to offer our clients maximum security. To do so, PandaLabs has an innovative automated system that analyzes and classifies thousands of new samples a day and returns automatic verdicts (malware or goodware). This system is the basis of collective intelligence, Panda Security's new security model which can even detect malware that has evaded other security solutions.
Currently, 99.4 percent of malware detected by PandaLabs is analyzed through this system of collective intelligence. This is complemented through the work of several teams, each specialized in a specific type of malware (viruses, worms, Trojans, spyware, phishing, spam, etc.), who work 24/7 to provide global coverage. This translates into more secure, simpler and more resource-friendly solutions for clients.
More information is available in the PandaLabs blog: http://www.pandalabs.com.
-----
Community News You Can Use
Click to read MORE news:
www.GeorgiaFrontPage.com
Twitter: @gafrontpage & @TheGATable @HookedonHistory
www.ArtsAcrossGeorgia.com
Twitter: @artsacrossga, @softnblue, @RimbomboAAG
www.FayetteFrontPage.com
Twitter: @FayetteFP
I wrote a couple of days ago at http://goo.gl/nvl9 about a "trojan" email message that steals your user IDs and passwords to your online banking account. This new scam is a different Trojan message with a very clever delivery method.
The new scam sends a fake "iTunes receipt" email message to millions of people. The message appears to be completely authentic, except for the price shown in your bill. The message I received was for nearly $1,000. That's part of the trap.
Most people are likely to take action when seeing an "incorrect amount" appear on their bill. (I didn't do that because I never saw the "bill" in my spam folder until I went looking for it later, after reading about the new scam.) Most people will click on the "report a problem" link that is included in the email message. However, that link takes you to a rogue web page that downloads the same Zeus trojan malware as described in the earlier article to your Windows computer. (Linux and Macintosh computers will not be affected.)
The program then waits for the user to log onto a list of targeted banks and financial institutions, and then steals login credentials and other data which are immediately sent to a remote server hosted by cybercriminals. It can also modify, in a user’s browser, the genuine web pages from a bank’s web servers to ask for personal information such as payment card number and PIN, one time passwords, etc.
Panda Labs released a statement explaining the infection process:
"After clicking the link, the victim is asked to download a fake PDF reader. Once installation is complete, the user is redirected to an infected web page containing the Zeus Trojan, which is specifically designed to steal personal data."
Here is the full announcement from Panda Labs:
Massive Phishing Attack Uses iTunes as Lure to Steal Bank Details, Reports PandaLabs
ORLANDO, Fla., Oct. 4 -- PandaLabs, Panda Security's antimalware laboratory, has discovered that Apple's popular iTunes platform has become a major target for hackers looking to steal credit card data from the service's millions of users.
Victims receive a cleverly-crafted email informing them that they have made an expensive purchase on iTunes. The user, having never made the purchase to begin with, is concerned by the email and naturally tries to resolve the problem – in this case by clicking on the proffered (fake) link. An example of this fraudulent iTunes receipt can be seen here: http://www.flickr.com/photos/panda_security/5050360091/
After clicking the link, the victim is asked to download a fake PDF reader. Once installation is complete, the user is redirected to an infected Web page containing the Zeus Trojan, which is specifically designed to steal personal data. This phishing attack was uncovered shortly after a similar phishing attack targeting LinkedIn users appeared last week, which appears to have originated in Russia.
"Phishing is nothing new," said Luis Corrons, Technical Director of PandaLabs. "What never ceases to surprise us is that the techniques used to trick victims continue to be so simple, but the design and content is so very well-orchestrated. It's very easy to fall into the trap. When using services such as iTunes, it is absolutely crucial that users never go to the website via email, but rather from the platform itself where they can verify their account status."
This technique has been reported to the Anti-Phishing Working Group, which has started to block some of the Web addresses linked to in the fake email.
PandaLabs advises all users to be wary of any emails related to iTunes, regardless of how genuine they seem. Users who think they may have been affected are urged to scan their computers thoroughly to locate and remove any possible active threats. [Windows] Users who do not have an antivirus installed can use Panda Cloud Antivirus, a free security service available at www.cloudantivirus.com.
More information is available in the PandaLabs Blog.
About PandaLabs
Since 1990, its mission has been to detect and eliminate new threats as rapidly as possible to offer our clients maximum security. To do so, PandaLabs has an innovative automated system that analyzes and classifies thousands of new samples a day and returns automatic verdicts (malware or goodware). This system is the basis of collective intelligence, Panda Security's new security model which can even detect malware that has evaded other security solutions.
Currently, 99.4 percent of malware detected by PandaLabs is analyzed through this system of collective intelligence. This is complemented through the work of several teams, each specialized in a specific type of malware (viruses, worms, Trojans, spyware, phishing, spam, etc.), who work 24/7 to provide global coverage. This translates into more secure, simpler and more resource-friendly solutions for clients.
More information is available in the PandaLabs blog: http://www.pandalabs.com.
-----
Community News You Can Use
Click to read MORE news:
www.GeorgiaFrontPage.com
Twitter: @gafrontpage & @TheGATable @HookedonHistory
www.ArtsAcrossGeorgia.com
Twitter: @artsacrossga, @softnblue, @RimbomboAAG
www.FayetteFrontPage.com
Twitter: @FayetteFP
Friday, July 9, 2010
Protect Your Computer: Don’t be Scared by 'Scareware'
We’ve all seen them—pop-up messages telling you your computer is infected with a virus. To get rid of it, all you have to do is order the antivirus software being advertised.
Before you click, though, know this: few Internet security companies use ads to tell you about a virus on your computer. Most of these pop-ups are scams, and it’s one of the fastest-growing types of Internet fraud today.
These scams have a name. They’re called “scareware” because they try to frighten you into purchasing fake antivirus software with a seemingly genuine security warning. But if you do try to buy this program, it will either do nothing…or it could compromise your computer by installing malicious software onto your system. And in some instances, you don’t even have to click on the pop-up box…the software downloads automatically.
Cyber criminals often use notorious botnets—networks of compromised computers under their control—to push out their software. They’ll also masquerade as legitimate Internet security companies and buy ads on other websites—called “malvertising”—but when consumers click on the ads to purchase the products, they are redirected to websites controlled by the bad guys.
Many of these criminals operate outside the U.S., making investigations difficult and complex for the FBI and its partners. But we’ve had successes—just this past May, for example, three people were charged in Illinois in connection with a scheme that caused Internet users in more than 60 countries, including the U.S., to buy more than $100 million worth of bogus scareware software.
Two of the defendants, including an American, are accused of running an overseas company that claimed to sell antivirus and computer performance/repair software over the Internet. A third man operated the company’s Cincinnati call center, which was responsible for technical and billing support to its customers (but in reality deflected complaints from consumers who realized the software didn’t work).
According to the indictment, proceeds from the sales of the software (which was typically purchased by credit card) were deposited into bank accounts controlled by the defendants and others throughout the world and then quickly transferred to accounts in Europe.
In addition to the consumers victimized by the scam, a number of legitimate companies tricked into selling ad space on their websites for the bogus software were allegedly defrauded of about $85,000 in unpaid fees.
Don’t let it happen to you. Here are a few words of advice on scareware.
How to spot a scareware scam:
* Does the pop-up use “non-clickable” icons? To build authenticity into their software, scareware will show a list of reputable icons—like those of software companies or security publications. However, the user can’t click through to the sites to see the actual reviews or recommendations.
* Is the pop-up ad hard to close? Scareware pop-ups employ aggressive techniques and will not close easily after clicking the “close” or “X” button.
* Have you heard of the software before? Cyber criminals use easy-to-remember names like Virus Shield, Antivirus, or VirusRemover.
How to protect yourself from scareware: Make sure your computer is fully protected by legitimate, up-to-date antivirus software.
If you think you’ve been victimized by scareware: File a complaint with the FBI’s Internet Crime Complaint Center.
-----
www.fayettefrontpage.com
Fayette Front Page
www.georgiafrontpage.com
Georgia Front Page
Follow us on Twitter: @GAFrontPage
Before you click, though, know this: few Internet security companies use ads to tell you about a virus on your computer. Most of these pop-ups are scams, and it’s one of the fastest-growing types of Internet fraud today.
These scams have a name. They’re called “scareware” because they try to frighten you into purchasing fake antivirus software with a seemingly genuine security warning. But if you do try to buy this program, it will either do nothing…or it could compromise your computer by installing malicious software onto your system. And in some instances, you don’t even have to click on the pop-up box…the software downloads automatically.
Cyber criminals often use notorious botnets—networks of compromised computers under their control—to push out their software. They’ll also masquerade as legitimate Internet security companies and buy ads on other websites—called “malvertising”—but when consumers click on the ads to purchase the products, they are redirected to websites controlled by the bad guys.
Many of these criminals operate outside the U.S., making investigations difficult and complex for the FBI and its partners. But we’ve had successes—just this past May, for example, three people were charged in Illinois in connection with a scheme that caused Internet users in more than 60 countries, including the U.S., to buy more than $100 million worth of bogus scareware software.
Two of the defendants, including an American, are accused of running an overseas company that claimed to sell antivirus and computer performance/repair software over the Internet. A third man operated the company’s Cincinnati call center, which was responsible for technical and billing support to its customers (but in reality deflected complaints from consumers who realized the software didn’t work).
According to the indictment, proceeds from the sales of the software (which was typically purchased by credit card) were deposited into bank accounts controlled by the defendants and others throughout the world and then quickly transferred to accounts in Europe.
In addition to the consumers victimized by the scam, a number of legitimate companies tricked into selling ad space on their websites for the bogus software were allegedly defrauded of about $85,000 in unpaid fees.
Don’t let it happen to you. Here are a few words of advice on scareware.
How to spot a scareware scam:
* Does the pop-up use “non-clickable” icons? To build authenticity into their software, scareware will show a list of reputable icons—like those of software companies or security publications. However, the user can’t click through to the sites to see the actual reviews or recommendations.
* Is the pop-up ad hard to close? Scareware pop-ups employ aggressive techniques and will not close easily after clicking the “close” or “X” button.
* Have you heard of the software before? Cyber criminals use easy-to-remember names like Virus Shield, Antivirus, or VirusRemover.
How to protect yourself from scareware: Make sure your computer is fully protected by legitimate, up-to-date antivirus software.
If you think you’ve been victimized by scareware: File a complaint with the FBI’s Internet Crime Complaint Center.
-----
www.fayettefrontpage.com
Fayette Front Page
www.georgiafrontpage.com
Georgia Front Page
Follow us on Twitter: @GAFrontPage
Sunday, July 4, 2010
Evaluate Appeals for Help from Friends Traveling Abroad with Caution
The Internet Crime Complaint Center continues to receive reports of individuals’ e-mail or social networking accounts being compromised and used in a social engineering scam to swindle consumers out of thousands of dollars.
Here’s how it works: Hackers infiltrate your social networking page, claim to be you, and write your contacts/friends. They portray themselves as “victims” who were robbed while traveling abroad and state they need money immediately because they don’t have a passport, money, credit cards, or cell phone and are stranded.
Some claim they only have a few days to pay their hotel bill and promise to reimburse costs upon their return home. Recipients may be tempted to respond to these appeals because they appear to be from a friend and there’s a sense of urgency to help.
If you receive a similar notice and aren’t sure if it is a scam, you should always verify the information before sending any money. If you have been a victim of this type of scam or any other cyber crime, report it to the IC3 website at www.IC3.gov.
The IC3’s database links complaints for potential referral to the appropriate law enforcement agency for case consideration. Complaint information is also used to identity emerging trends and patterns.
-----
www.fayettefrontpage.com
Fayette Front Page
www.georgiafrontpage.com
Georgia Front Page
Follow us on Twitter: @GAFrontPage
Here’s how it works: Hackers infiltrate your social networking page, claim to be you, and write your contacts/friends. They portray themselves as “victims” who were robbed while traveling abroad and state they need money immediately because they don’t have a passport, money, credit cards, or cell phone and are stranded.
Some claim they only have a few days to pay their hotel bill and promise to reimburse costs upon their return home. Recipients may be tempted to respond to these appeals because they appear to be from a friend and there’s a sense of urgency to help.
If you receive a similar notice and aren’t sure if it is a scam, you should always verify the information before sending any money. If you have been a victim of this type of scam or any other cyber crime, report it to the IC3 website at www.IC3.gov.
The IC3’s database links complaints for potential referral to the appropriate law enforcement agency for case consideration. Complaint information is also used to identity emerging trends and patterns.
-----
www.fayettefrontpage.com
Fayette Front Page
www.georgiafrontpage.com
Georgia Front Page
Follow us on Twitter: @GAFrontPage
Wednesday, May 12, 2010
Remington Financial Group Chairman Issues 'Email Fraud Warning,' Alerts FBI
/PRNewswire/ -- Chairman and founder of Remington Financial Group, Andy Bogdanoff, has alerted the FBI and other law enforcement agencies that an email scam is falsely using Remington's name to gain private information that may be used in identity theft.
In making the announcement, Bogdanoff emphasized that none of Remington's customer data had been breached by what appears to be a 'copycat email' scam similar to those that attempted to victimize bank and credit card customers in the past.
Remington is a national financial services company, specializing in providing commercial real estate owners and developers with access to needed capital. Since 1993, Remington has arranged more than $5 billion in financing for all types of commercial property.
Remington uncovered the "phishing" scheme through routine monitoring of the Internet for potential fraud activity. "In keeping with Remington's fraud policy," Bogdanoff said, "we referred the data we collected to the appropriate law enforcement agencies, including the Federal Bureau of Investigation and appropriate state and local authorities."
Earlier in the year, Remington implemented what is believed to be the most comprehensive and stringent fraud policy in the financial services industry. At the time, Bogdanoff called on others in the industry to "shore up" their fraud policies and to rectify any deficiencies. "By doing so," Bogdanoff said, "the financial services industry can help regain public confidence and trust, which has been sorely tested by recent scandals."
The Remington Financial Group Fraud Policy includes strict monitoring controls and rigorous due diligence procedures designed to protect the integrity of the company and the interests of every person and entity involved in Remington activities.
"My hope is that Remington's Fraud Policy will become the 'gold standard' throughout the industry," Bogdanoff said. "At Remington, our goal is clear: To be super-vigilant against even the hint of fraudulent or other inappropriate activity by any employee, customer or lender associated with Remington. Any such behavior will not be tolerated. And any violation of this policy will be met with swift and appropriate disciplinary or legal action," Bogdanoff said.
-----
www.fayettefrontpage.com
Fayette Front Page
www.georgiafrontpage.com
Georgia Front Page
Follow us on Twitter: @GAFrontPage
In making the announcement, Bogdanoff emphasized that none of Remington's customer data had been breached by what appears to be a 'copycat email' scam similar to those that attempted to victimize bank and credit card customers in the past.
Remington is a national financial services company, specializing in providing commercial real estate owners and developers with access to needed capital. Since 1993, Remington has arranged more than $5 billion in financing for all types of commercial property.
Remington uncovered the "phishing" scheme through routine monitoring of the Internet for potential fraud activity. "In keeping with Remington's fraud policy," Bogdanoff said, "we referred the data we collected to the appropriate law enforcement agencies, including the Federal Bureau of Investigation and appropriate state and local authorities."
Earlier in the year, Remington implemented what is believed to be the most comprehensive and stringent fraud policy in the financial services industry. At the time, Bogdanoff called on others in the industry to "shore up" their fraud policies and to rectify any deficiencies. "By doing so," Bogdanoff said, "the financial services industry can help regain public confidence and trust, which has been sorely tested by recent scandals."
The Remington Financial Group Fraud Policy includes strict monitoring controls and rigorous due diligence procedures designed to protect the integrity of the company and the interests of every person and entity involved in Remington activities.
"My hope is that Remington's Fraud Policy will become the 'gold standard' throughout the industry," Bogdanoff said. "At Remington, our goal is clear: To be super-vigilant against even the hint of fraudulent or other inappropriate activity by any employee, customer or lender associated with Remington. Any such behavior will not be tolerated. And any violation of this policy will be met with swift and appropriate disciplinary or legal action," Bogdanoff said.
-----
www.fayettefrontpage.com
Fayette Front Page
www.georgiafrontpage.com
Georgia Front Page
Follow us on Twitter: @GAFrontPage
Friday, April 9, 2010
Phishing Attacks on Taxpayers Rise in the Weeks Leading up to April 15th IRS Tax Filing
/PRNewswire/-- SonicWALL, Inc. (NASDAQ:SNWL) , a leading secure network infrastructure company, last week began seeing the expected rise in phishing threats related to the upcoming April 15 Internal Revenue Service (IRS) tax filing date. The prominent phishing scam comes when taxpayers are notified from the IRS that their tax refund is now available. Scammers will then ask users to provide their bank card information and identity information to assure that the refund is deposited in the appropriate account.
"As we've seen in the past, the weeks before April 15th are the most likely for taxpayers to see a rise in tax-related phishing emails," said Leon Hilton, Email Security Expert, SonicWALL. "We predict that more than 100 million IRS related phishing emails will be sent to tax payers in the days leading up to and after the April 15 tax filing deadline."
While the IRS does not send e-mail regarding your refund, you may still get legitimate e-mail on the subject. A myriad legitimate online filing services, online consultants who answer tax-related questions and online tax calculators currently exist. For example, if you file your taxes with an online tax preparation service you are likely to get legitimate email from them and the bank which acts as the transfer agent for the transaction for the IRS. Phishers use this opportunity to prey on taxpayers who are filing their tax refund -- asking them for bank card information to deposit the refund and social security number so they can verify a taxpayer's identity. Be wary of these types of inquiries.
To help taxpayers identify tax-related potential phishing schemes, the SonicWALL threat team has outlined several steps to help taxpayers defend against these types of phishing-related security threats:
1. Be aware that the IRS does not send you e-mails which ask for any
financial, personal or identity information. Do not respond to these
e-mails. Official correspondence with the IRS is done through US Mail.
2. If you use an online preparations service, pay close attention to
relevant instructions as e-mail messages you could receive include
details such as bank account numbers and when you can expect your
refund to be deposited. Always go back to the tax preparation website
or call to ensure that the online transaction goes smoothly. Also be
sure to print off any related materials to save for later reference if
needed.
3. If you use a tax filing program you will most likely receive an e-mail
notification when your taxes are filed, letting you know that your tax
forms were accepted or possibly rejected. Do not click on any links in
the e-mail. Go back to the tax preparation program and check for any
notifications.
4. Beware of offers that allow you to get loans on your income tax refund.
While some offers are legitimate many others are not and are spam or
phishing scams.
5. If you have a question about an email confirmation of your online
filing and/or refund information from your software program or online
filing service, contact the phone number of the tax service provider.
6. Improve your phishing IQ. SonicWALL has put together the phishing IQ
test specifically to test your phishing knowledge. Go to:
www.sonicwall.com/phishing/
7. For more information about identity phishing, e-mail scams and bogus
IRS websites, go to
http://www.irs.gov/privacy/article/0,,id=179820,00.html?portlet=1
For more information on the topic of phishing and other related threats, go to: http://anti-spam.sonicwall.com/
SonicWALL is a registered trademark of SonicWALL, Inc. Other product and company names mentioned herein may be trademarks and/or registered trademarks of their respective companies.
Safe Harbor Regarding Forward-Looking Statements
Certain statements in this press release are "forward-looking statements" within the meaning of the Private Securities Litigation Reform Act of 1995. The forward-looking statements include but are not limited to statements regarding defensive measures to be used to combat attacks concerning news search sites. These forward-looking statements are based on the opinions and estimates of management at the time the statements are made and are subject to certain risks and uncertainties that could cause actual results to differ materially from those anticipated in the forward-looking statements. In addition, please see the "Risk Factors" described in our Securities and Exchange Commission filings, including our Annual Report on Form 10-K for the year ended December 31, 2008, for a more detailed description of the risks facing our business. All forward-looking statements included in this release are based upon information available to SonicWALL as of the date of the release, and we assume no obligation to update any such forward-looking statement.
-----
www.fayettefrontpage.com
Fayette Front Page
www.georgiafrontpage.com
Georgia Front Page
Follow us on Twitter: @GAFrontPage
"As we've seen in the past, the weeks before April 15th are the most likely for taxpayers to see a rise in tax-related phishing emails," said Leon Hilton, Email Security Expert, SonicWALL. "We predict that more than 100 million IRS related phishing emails will be sent to tax payers in the days leading up to and after the April 15 tax filing deadline."
While the IRS does not send e-mail regarding your refund, you may still get legitimate e-mail on the subject. A myriad legitimate online filing services, online consultants who answer tax-related questions and online tax calculators currently exist. For example, if you file your taxes with an online tax preparation service you are likely to get legitimate email from them and the bank which acts as the transfer agent for the transaction for the IRS. Phishers use this opportunity to prey on taxpayers who are filing their tax refund -- asking them for bank card information to deposit the refund and social security number so they can verify a taxpayer's identity. Be wary of these types of inquiries.
To help taxpayers identify tax-related potential phishing schemes, the SonicWALL threat team has outlined several steps to help taxpayers defend against these types of phishing-related security threats:
1. Be aware that the IRS does not send you e-mails which ask for any
financial, personal or identity information. Do not respond to these
e-mails. Official correspondence with the IRS is done through US Mail.
2. If you use an online preparations service, pay close attention to
relevant instructions as e-mail messages you could receive include
details such as bank account numbers and when you can expect your
refund to be deposited. Always go back to the tax preparation website
or call to ensure that the online transaction goes smoothly. Also be
sure to print off any related materials to save for later reference if
needed.
3. If you use a tax filing program you will most likely receive an e-mail
notification when your taxes are filed, letting you know that your tax
forms were accepted or possibly rejected. Do not click on any links in
the e-mail. Go back to the tax preparation program and check for any
notifications.
4. Beware of offers that allow you to get loans on your income tax refund.
While some offers are legitimate many others are not and are spam or
phishing scams.
5. If you have a question about an email confirmation of your online
filing and/or refund information from your software program or online
filing service, contact the phone number of the tax service provider.
6. Improve your phishing IQ. SonicWALL has put together the phishing IQ
test specifically to test your phishing knowledge. Go to:
www.sonicwall.com/phishing/
7. For more information about identity phishing, e-mail scams and bogus
IRS websites, go to
http://www.irs.gov/privacy/article/0,,id=179820,00.html?portlet=1
For more information on the topic of phishing and other related threats, go to: http://anti-spam.sonicwall.com/
SonicWALL is a registered trademark of SonicWALL, Inc. Other product and company names mentioned herein may be trademarks and/or registered trademarks of their respective companies.
Safe Harbor Regarding Forward-Looking Statements
Certain statements in this press release are "forward-looking statements" within the meaning of the Private Securities Litigation Reform Act of 1995. The forward-looking statements include but are not limited to statements regarding defensive measures to be used to combat attacks concerning news search sites. These forward-looking statements are based on the opinions and estimates of management at the time the statements are made and are subject to certain risks and uncertainties that could cause actual results to differ materially from those anticipated in the forward-looking statements. In addition, please see the "Risk Factors" described in our Securities and Exchange Commission filings, including our Annual Report on Form 10-K for the year ended December 31, 2008, for a more detailed description of the risks facing our business. All forward-looking statements included in this release are based upon information available to SonicWALL as of the date of the release, and we assume no obligation to update any such forward-looking statement.
-----
www.fayettefrontpage.com
Fayette Front Page
www.georgiafrontpage.com
Georgia Front Page
Follow us on Twitter: @GAFrontPage
Friday, March 12, 2010
National Center for Disaster Fraud to Coordinate Haitian and Chilean Fraud Complaints
Shortly after the earthquake in Haiti last January, the FBI and the National Center for Disaster Fraud (NCDF) established a telephone hotline to report suspected fraud associated with relief efforts. That number, (866) 720-5721, was initially staffed for the purpose of reporting suspected scams being perpetrated by criminals in the aftermath of the Haitian earthquake.
Since then with the recent earthquake in Chile our efforts have expanded to identify similar fraud activity coming out of that disaster. Therefore the public is encouraged to call this same number (866) 720-5721 to report suspected fraud from either disaster. The telephone line is staffed by a live operator 24 hours a day, seven days a week. Additionally, e-mail information can be directly sent to disaster@leo.gov.
The National Center for Disaster Fraud was originally established by the Department of Justice to investigate, prosecute, and deter fraud in the wake of Hurricane Katrina, when billions of dollars in federal disaster relief poured into the Gulf Coast Region. Now, its mission has expanded to include suspected fraud from any natural or manmade disaster. More than 20 federal agencies, including the
FBI, participate in the NCDF, allowing the center to act as a centralized clearinghouse of information related to Haitian or Chilean Relief Fraud.
The FBI continues to remind the public to apply a critical eye and do their due diligence before giving contributions to anyone soliciting donations on behalf of Haitian or Chilean victims. Solicitations can originate from e-mails, websites, door-to-door collections, mailings and telephone calls, and similar methods.
Therefore, before making a donation of any kind, consumers should adhere to certain guidelines, including the following:
* Do not respond to unsolicited (spam) incoming e-mails, including clicking links
contained within those messages because they may contain computer viruses.
* Be skeptical of individuals representing themselves as surviving victims or officials
asking for donations via e-mail or social networking sites.
* Beware of organizations with copy-cat names similar to but not exactly the same
as those of reputable charities.
* Rather than following a purported link to a website, verify the legitimacy of non-profit
organizations by utilizing various Internet-based resources that may assist in confirming
the group's existence and its non-profit status.
* Be cautious of e-mails that claim to show pictures of the disaster areas in attached
files because the files may contain viruses. Only open attachments from known senders.
* To ensure contributions are received and used for intended purposes, make contributions
directly to known organizations rather than relying on others to make the donation
on your behalf.
* Do not be pressured into making contributions, as reputable charities do not use
such tactics.
* Do not give your personal or financial information to anyone who solicits contributions.
Providing such information may compromise your identity and make you vulnerable
to identity theft.
* Avoid cash donations if possible. Pay by debit or credit card, or write a check
directly to the charity. Do not make checks payable to individuals.
* Legitimate charities do not normally solicit donations via money transfer services.
* Most legitimate charities websites end in .org rather than .com.
* There are scams targeting Haitian immigrants and their families offering assistance
in getting family members and friends out of Haiti. These individuals charge a fee
and then claim they will provide the necessary immigration paperwork or an airline
ticket for disaster victims to leave Haiti. For official information pertaining
to immigration from Haiti to the U.S., visit the U.S. Citizenship and Immigration
Services (USCIS) website at www.USCIS.gov.
If you believe you have been a victim of fraud from someone or an organization soliciting
relief on behalf of Haitian or Chilean earthquake victims, contact the National Center for Disaster Fraud at (866) 720-5721. You can also fax information to fax (225) 334-4707 or e-mail it to disaster@leo.gov.
You can also report suspicious e-mail solicitations or fraudulent websites to the FBI's Internet Crime Complaint Center at www.ic3.gov.
------
www.fayettefrontpage.com
Fayette Front Page
www.georgiafrontpage.com
Georgia Front Page
Follow us on Twitter: @GAFrontPage
Since then with the recent earthquake in Chile our efforts have expanded to identify similar fraud activity coming out of that disaster. Therefore the public is encouraged to call this same number (866) 720-5721 to report suspected fraud from either disaster. The telephone line is staffed by a live operator 24 hours a day, seven days a week. Additionally, e-mail information can be directly sent to disaster@leo.gov.
The National Center for Disaster Fraud was originally established by the Department of Justice to investigate, prosecute, and deter fraud in the wake of Hurricane Katrina, when billions of dollars in federal disaster relief poured into the Gulf Coast Region. Now, its mission has expanded to include suspected fraud from any natural or manmade disaster. More than 20 federal agencies, including the
FBI, participate in the NCDF, allowing the center to act as a centralized clearinghouse of information related to Haitian or Chilean Relief Fraud.
The FBI continues to remind the public to apply a critical eye and do their due diligence before giving contributions to anyone soliciting donations on behalf of Haitian or Chilean victims. Solicitations can originate from e-mails, websites, door-to-door collections, mailings and telephone calls, and similar methods.
Therefore, before making a donation of any kind, consumers should adhere to certain guidelines, including the following:
* Do not respond to unsolicited (spam) incoming e-mails, including clicking links
contained within those messages because they may contain computer viruses.
* Be skeptical of individuals representing themselves as surviving victims or officials
asking for donations via e-mail or social networking sites.
* Beware of organizations with copy-cat names similar to but not exactly the same
as those of reputable charities.
* Rather than following a purported link to a website, verify the legitimacy of non-profit
organizations by utilizing various Internet-based resources that may assist in confirming
the group's existence and its non-profit status.
* Be cautious of e-mails that claim to show pictures of the disaster areas in attached
files because the files may contain viruses. Only open attachments from known senders.
* To ensure contributions are received and used for intended purposes, make contributions
directly to known organizations rather than relying on others to make the donation
on your behalf.
* Do not be pressured into making contributions, as reputable charities do not use
such tactics.
* Do not give your personal or financial information to anyone who solicits contributions.
Providing such information may compromise your identity and make you vulnerable
to identity theft.
* Avoid cash donations if possible. Pay by debit or credit card, or write a check
directly to the charity. Do not make checks payable to individuals.
* Legitimate charities do not normally solicit donations via money transfer services.
* Most legitimate charities websites end in .org rather than .com.
* There are scams targeting Haitian immigrants and their families offering assistance
in getting family members and friends out of Haiti. These individuals charge a fee
and then claim they will provide the necessary immigration paperwork or an airline
ticket for disaster victims to leave Haiti. For official information pertaining
to immigration from Haiti to the U.S., visit the U.S. Citizenship and Immigration
Services (USCIS) website at www.USCIS.gov.
If you believe you have been a victim of fraud from someone or an organization soliciting
relief on behalf of Haitian or Chilean earthquake victims, contact the National Center for Disaster Fraud at (866) 720-5721. You can also fax information to fax (225) 334-4707 or e-mail it to disaster@leo.gov.
You can also report suspicious e-mail solicitations or fraudulent websites to the FBI's Internet Crime Complaint Center at www.ic3.gov.
------
www.fayettefrontpage.com
Fayette Front Page
www.georgiafrontpage.com
Georgia Front Page
Follow us on Twitter: @GAFrontPage
Wednesday, March 10, 2010
Rental and Real Estate Scams
Individuals need to be cautious when posting rental properties and real estate on-line.
The IC3 continues to receive numerous complaints from individuals who have fallen
victim to scams involving rentals of apartments and houses, as well as postings
of real estate on-line.
Rental scams occur when the victim has rental property advertised and is contacted
by an interested party. Once the rental price is agreed-upon, the scammer forwards
a check for the deposit on the rental property to the victim. The check is to cover
housing expenses and is, either written in excess of the amount required, with the
scammer asking for the remainder to be remitted back, or the check is written for
the correct amount, but the scammer backs out of the rental agreement and asks for
a refund. Since the banks do not usually place a hold on the funds, the victim has
immediate access to them and believes the check has cleared. In the end, the check
is found to be counterfeit and the victim is held responsible by the bank for all
losses.
Another type of scam involves real estate that is posted via classified advertisement
websites. The scammer duplicates postings from legitimate real estate websites and
reposts these ads, after altering them. Often, the scammers use the broker's real
name to create a fake email, which gives the fraud more legitimacy. When the victim
sends an email through the classified advertisement website inquiring about the
home, they receive a response from someone claiming to be the owner. The "owner"
claims he and his wife are currently on missionary work in a foreign country. Therefore,
he needs someone to rent their home while they are away. If the victim is interested
in renting the home, they are asked to send money to the owner in the foreign country.
If you have been a victim of Internet crime, please file a complaint at
http://www.IC3.gov/.
-----
www.fayettefrontpage.com
Fayette Front Page
www.georgiafrontpage.com
Georgia Front Page
Follow us on Twitter: @GAFrontPage
The IC3 continues to receive numerous complaints from individuals who have fallen
victim to scams involving rentals of apartments and houses, as well as postings
of real estate on-line.
Rental scams occur when the victim has rental property advertised and is contacted
by an interested party. Once the rental price is agreed-upon, the scammer forwards
a check for the deposit on the rental property to the victim. The check is to cover
housing expenses and is, either written in excess of the amount required, with the
scammer asking for the remainder to be remitted back, or the check is written for
the correct amount, but the scammer backs out of the rental agreement and asks for
a refund. Since the banks do not usually place a hold on the funds, the victim has
immediate access to them and believes the check has cleared. In the end, the check
is found to be counterfeit and the victim is held responsible by the bank for all
losses.
Another type of scam involves real estate that is posted via classified advertisement
websites. The scammer duplicates postings from legitimate real estate websites and
reposts these ads, after altering them. Often, the scammers use the broker's real
name to create a fake email, which gives the fraud more legitimacy. When the victim
sends an email through the classified advertisement website inquiring about the
home, they receive a response from someone claiming to be the owner. The "owner"
claims he and his wife are currently on missionary work in a foreign country. Therefore,
he needs someone to rent their home while they are away. If the victim is interested
in renting the home, they are asked to send money to the owner in the foreign country.
If you have been a victim of Internet crime, please file a complaint at
http://www.IC3.gov/.
-----
www.fayettefrontpage.com
Fayette Front Page
www.georgiafrontpage.com
Georgia Front Page
Follow us on Twitter: @GAFrontPage
Tuesday, October 6, 2009
Alert: Gmail, Yahoo AOL Accounts Compromised
20,000+ Gmail, Yahoo, AOL Accounts Compromised [ALERT]
October 6th, 2009 | by Ben Parr
Yesterday, it was revealed that 10,000+ Hotmail accounts were compromised and all of the usernames and passwords of these accounts were posted online. It was a major security and scam issue, but it was thought to only affect Hotmail users.
Unfortunately, Hotmail was only the beginning. Google.....http://mashable.com/2009/10/06/gmail-accounts-exposed/
-----
www.fayettefrontpage.com
Fayette Front Page
www.georgiafrontpage.com
Georgia Front Page
October 6th, 2009 | by Ben Parr
Yesterday, it was revealed that 10,000+ Hotmail accounts were compromised and all of the usernames and passwords of these accounts were posted online. It was a major security and scam issue, but it was thought to only affect Hotmail users.
Unfortunately, Hotmail was only the beginning. Google.....http://mashable.com/2009/10/06/gmail-accounts-exposed/
-----
www.fayettefrontpage.com
Fayette Front Page
www.georgiafrontpage.com
Georgia Front Page
Monday, August 17, 2009
Businesses Beware Of Mass Marketing Scams
Almost everyone has heard horror stories about individuals who have been taken in by mass marketing fraud schemes—from phony sweepstakes to lottery scams. But here’s something you may not know: the very same fraudsters who target individual consumers also target businesses.
Illicit mass marketers know that the keepers of corporate funds may be just as susceptible to fake ploys as anyone else. And while business-oriented fraud usually results in losses of a few hundreds dollars the first time a company is hit, employees may continue to fall victim to these scams if the company has insufficient internal controls.
So what sort of mass marketing frauds are perpetrated against businesses? Here are just a few examples of what might happen to your companies:
* Masquerading as your usual office supplies provider, a fraudulent mass marketer contacts your employees, offering products at reduced or current prices in anticipation of impending rate increases. After paying the invoice, your company never receives the supplies it purchased.
* Your organization is asked to buy ad space in a business directory. The directory never sees the light of day, or only scammed companies like yours receive a copy.
* Criminals send invoices for unordered or undelivered products showing higher-than-agreed-upon prices, trying to exploit poor communication channels that may exist in your company and hoping that phony invoices will be paid without a second look.
* Your business receives an information packet offering to create and host your website. The packet includes a card that must be returned in order to “opt out” of the service, but the card is simply ignored or thrown out. Your company is then billed for web services it never ordered.
* In a variation of the advance-fee scheme that often targets individual consumers, perpetrators—usually targeting small businesses—offer low interest loans in exchange for an advance fee. You pay the fee, but your business never receives the loan.
While the FBI and other law enforcement agencies vigorously investigate frauds of all kinds, there are steps your businesses can take to protect themselves. For example:
* Educate yourself and your employees—especially frontline and accounts payable and receivable personnel—about common fraud schemes;
* Always ask for offers in writing, and require a written contract or purchase order for ANY transaction;
* Carefully review all invoices and compare them to expense records to make sure they are legitimate (and keep all records!);
* Use a credit card for purchasing supplies and services (if the vendor fails to deliver, you can dispute the charges);
* Don’t give out full names of employees, as fraudsters can obtain an employee’s name and then later claim this individual authorized the purchase of a product or service; and
* Be wary of accepting checks, because in some cases perpetrators have conducted a series of smaller, legitimate transactions to enhance their credibility and then used a counterfeit check to pay for a large order.
If you suspect you’ve been scammed, file a complaint with the Federal Trade Commission’s Consumer Sentinel, a database accessed by law enforcement agencies around the country. You can also contact your local FBI office.
-----
www.fayettefrontpage.com
Fayette Front Page
www.georgiafrontpage.com
Georgia Front Page
www.artsacrossgeorgia.com
Arts Across Georgia
Illicit mass marketers know that the keepers of corporate funds may be just as susceptible to fake ploys as anyone else. And while business-oriented fraud usually results in losses of a few hundreds dollars the first time a company is hit, employees may continue to fall victim to these scams if the company has insufficient internal controls.
So what sort of mass marketing frauds are perpetrated against businesses? Here are just a few examples of what might happen to your companies:
* Masquerading as your usual office supplies provider, a fraudulent mass marketer contacts your employees, offering products at reduced or current prices in anticipation of impending rate increases. After paying the invoice, your company never receives the supplies it purchased.
* Your organization is asked to buy ad space in a business directory. The directory never sees the light of day, or only scammed companies like yours receive a copy.
* Criminals send invoices for unordered or undelivered products showing higher-than-agreed-upon prices, trying to exploit poor communication channels that may exist in your company and hoping that phony invoices will be paid without a second look.
* Your business receives an information packet offering to create and host your website. The packet includes a card that must be returned in order to “opt out” of the service, but the card is simply ignored or thrown out. Your company is then billed for web services it never ordered.
* In a variation of the advance-fee scheme that often targets individual consumers, perpetrators—usually targeting small businesses—offer low interest loans in exchange for an advance fee. You pay the fee, but your business never receives the loan.
While the FBI and other law enforcement agencies vigorously investigate frauds of all kinds, there are steps your businesses can take to protect themselves. For example:
* Educate yourself and your employees—especially frontline and accounts payable and receivable personnel—about common fraud schemes;
* Always ask for offers in writing, and require a written contract or purchase order for ANY transaction;
* Carefully review all invoices and compare them to expense records to make sure they are legitimate (and keep all records!);
* Use a credit card for purchasing supplies and services (if the vendor fails to deliver, you can dispute the charges);
* Don’t give out full names of employees, as fraudsters can obtain an employee’s name and then later claim this individual authorized the purchase of a product or service; and
* Be wary of accepting checks, because in some cases perpetrators have conducted a series of smaller, legitimate transactions to enhance their credibility and then used a counterfeit check to pay for a large order.
If you suspect you’ve been scammed, file a complaint with the Federal Trade Commission’s Consumer Sentinel, a database accessed by law enforcement agencies around the country. You can also contact your local FBI office.
-----
www.fayettefrontpage.com
Fayette Front Page
www.georgiafrontpage.com
Georgia Front Page
www.artsacrossgeorgia.com
Arts Across Georgia
Friday, August 14, 2009
www.AutomotiveStimulusPlan.com Warns of Online Scams
/PRNewswire/ -- Some of the leading U.S. Automotive Retailers recently launched a dealer funded stimulus program to provide up to $4500 in incentives for consumers who were left behind by the government funded stimulus plan. Due to the rules of the government's program, over 90% of consumers are not eligible and consumers are not happy about it. Some of the largest retailers in the country recently launched the www.AutoStimulusPlan.com, a Stimulus Program that is more inclusive because all vehicles older than 2007 are eligible regardless of their current mpg.
The recent launch of the dealer stimulus plan sparked a nationwide wave of interest in the program, which provides up to $4,500 of trade-in credits to car-owners who trade in their vehicle for a more fuel efficient alternative. However, the flood of enthusiasm for the new dealer stimulus plan has led to the emergence of scams targeting consumers looking to benefit from the program. www.AutoStimulusPlan.com, the official website for the dealer funded stimulus, has issued a warning to consumers and is providing specific instructions on how to avoid scams. "Consumers should be cautious because some scam sites have emerged that are attempting to fraudulently capture personal financial information to be used illegally," said Scott Fletcher, director of www.AutoStimulusPlan.com.
www.AutoStimulusPlan.com warns consumers to be wary of any site that asks for personal financial information. "Avoid any website that says you need to "pre-register," or asks you for your social security number or credit card number," said Fletcher. The organization is warning consumers not to give out their personal information on these scam sites because it could result in identity theft.
The organization has advised consumers, "You are not required to sign up for this program. Participating new car dealers will add a trade-in credit to your vehicles fair trade value, assuming it meets program requirements. Don't be fooled by fake websites that portray themselves as an official website for the dealer stimulus plan because there is only one official website for the national dealer funded stimulus program, www.AutoStimulusPlan.com," said Fletcher. The organization also advises consumers to make sure they receive all the manufacturer rebates in addition to the trade-in credits they receive for their qualifying vehicle.
Some local dealerships have implemented advertising campaigns that mislead consumers to think they are a part of the national dealer Stimulus Plan. To be safe, consumers are advised not to rely on local advertising and should visit the only national dealer-funded Stimulus Plan at www.AutoStimulusPlan.com.
The dealer funded stimulus plan has gotten a lot of attention because it compensates for the gaps in the governments program by allowing consumers to purchase pre-owned vehicles and to choose a short term lease.
Automotive Stimulus Program Requirements:
1. Current vehicle is a 2006 or older
2. Current vehicle is operable
3. Current vehicle has been owned for a minimum of 6 months
4. Current vehicle has been registered for a minimum of 6 months
5. The replacement vehicle has to be more fuel efficient by a minimum
of 2mpg
Incentives vary based on the consumer's current vehicle and desired vehicle (visit www.AutoStimulusPlan.com for details). Incentives vary in some states due to state laws that regulate automotive advertising and promotion. The Auto Stimulus Plan will end on November 1st and will continue if the government's program expires before that date.
-----
www.fayettefrontpage.com
Fayette Front Page
www.georgiafrontpage.com
Georgia Front Page
The recent launch of the dealer stimulus plan sparked a nationwide wave of interest in the program, which provides up to $4,500 of trade-in credits to car-owners who trade in their vehicle for a more fuel efficient alternative. However, the flood of enthusiasm for the new dealer stimulus plan has led to the emergence of scams targeting consumers looking to benefit from the program. www.AutoStimulusPlan.com, the official website for the dealer funded stimulus, has issued a warning to consumers and is providing specific instructions on how to avoid scams. "Consumers should be cautious because some scam sites have emerged that are attempting to fraudulently capture personal financial information to be used illegally," said Scott Fletcher, director of www.AutoStimulusPlan.com.
www.AutoStimulusPlan.com warns consumers to be wary of any site that asks for personal financial information. "Avoid any website that says you need to "pre-register," or asks you for your social security number or credit card number," said Fletcher. The organization is warning consumers not to give out their personal information on these scam sites because it could result in identity theft.
The organization has advised consumers, "You are not required to sign up for this program. Participating new car dealers will add a trade-in credit to your vehicles fair trade value, assuming it meets program requirements. Don't be fooled by fake websites that portray themselves as an official website for the dealer stimulus plan because there is only one official website for the national dealer funded stimulus program, www.AutoStimulusPlan.com," said Fletcher. The organization also advises consumers to make sure they receive all the manufacturer rebates in addition to the trade-in credits they receive for their qualifying vehicle.
Some local dealerships have implemented advertising campaigns that mislead consumers to think they are a part of the national dealer Stimulus Plan. To be safe, consumers are advised not to rely on local advertising and should visit the only national dealer-funded Stimulus Plan at www.AutoStimulusPlan.com.
The dealer funded stimulus plan has gotten a lot of attention because it compensates for the gaps in the governments program by allowing consumers to purchase pre-owned vehicles and to choose a short term lease.
Automotive Stimulus Program Requirements:
1. Current vehicle is a 2006 or older
2. Current vehicle is operable
3. Current vehicle has been owned for a minimum of 6 months
4. Current vehicle has been registered for a minimum of 6 months
5. The replacement vehicle has to be more fuel efficient by a minimum
of 2mpg
Incentives vary based on the consumer's current vehicle and desired vehicle (visit www.AutoStimulusPlan.com for details). Incentives vary in some states due to state laws that regulate automotive advertising and promotion. The Auto Stimulus Plan will end on November 1st and will continue if the government's program expires before that date.
-----
www.fayettefrontpage.com
Fayette Front Page
www.georgiafrontpage.com
Georgia Front Page
Tuesday, June 9, 2009
TweetGrade Tames Twitter Universe to Help End Users Know Who They Can Trust
(BUSINESS WIRE)--Purewire, Inc., a SaaS-based secure Web gateway vendor that protects business and social interactions on the Web, today announced the launch of TweetGrade™ (www.tweetgrade.com), the authority in online user reputation on Twitter®. TweetGrade provides a quantitative assessment of a user’s reach and influence in the Twitter community, and it helps people understand a user’s online reputation, legitimacy and safety.
As the popularity of Twitter continues to skyrocket, criminals are taking note as well. Most recently, a "Best Video" scam attacked Twitter users, posting an update (or tweet) on compromised accounts that directed followers to a video prompting the purchase of rogue anti-virus software. Attacks such as this make it imperative to know the reputation of those people with whom you interact online. TweetGrade assures this trust by providing evidence of Twitter account legitimacy, protecting users from malicious or illegitimate accounts that attempt to send spam or spread malware.
The Purewire research team evaluated the use of Twitter to demonstrate the power of the TweetGrade service, and based on a seven-million user sample has found data that point to two overall realities:
First, many Twitter users abandon their accounts shortly after creating them, and a significant percentage show no signs of account activity.
* 40 percent of Twitter users have not tweeted since their first day on Twitter, evidence that the account was most likely created and subsequently abandoned.
* Approximately 25 percent of Twitter users are not following anyone, while two-thirds are following fewer than 10 people, evidence that the account was created but is largely dormant.
Second, Twitter is used more as a mass medium for receiving information, rather than as a way to interact with others. Proof is shown by evaluating the followers and friends of Twitter users:
* More than one-third of Twitter users have not posted a single tweet, and almost 80 percent of users have fewer than 10 tweets, evidence that while Twitter is billed as a great collaboration tool, a large number of users are there to consume content, not distribute it.
* Approximately 30 percent of Twitter users do not have any followers, and 80 percent of Twitter users have fewer than 10 followers, evidence that for many users, their posts are not being widely tracked or read.
* 50 percent of Twitter users are following more people than they have as followers, and another 30 percent of Twitter users are following the same number of people that are following them, evidence that users are aggressively trying to attract followers by hoping they will “follow back” but have been unsuccessful.
Additional details are available on the Purewire Web Security Blog located at http://blog.purewire.com/.
“There is a lot of noise on the Web, especially on Twitter lately with the buzz around Oprah, CNN and Ashton Kutcher. That makes it hard to wade through everything and understand who you’re interacting with online,” said Dr. Steve Webb, research scientist at Purewire, Inc. “Purewire is all about deciphering Web activity so that users know what and who they can trust, and TweetGrade is the first service that takes a comprehensive look at a Twitter account’s true legitimacy. Through our experience with PurewireTrust.org and our patent-pending Purewire Trust technology, we are able to offer Twitter users the transparency needed to identify and sort out the associated security threats.”
How TweetGrade Works
TweetGrade evaluates Twitter users based on their interactions on Twitter. The analysis is centered on a variety of inputs such as frequency and content of tweets, number of followers, number of those following and activity level. Users receive a simple letter grade that ranges from an 'A+' to an 'F' to verify their reputation on Twitter and are able to share their TweetGrade with the Twitter community with a simple push of a button.
Purewire is in the process of integrating TweetGrade reputations into a user’s Purewire Trust reputation. PurewireTrust.org launched in March at DEMO 2009, where the company received a DEMOgod award for its innovation. Purewire Trust builds reputations that protect individuals in user-to-user relationships for communication (such as social networks like Facebook and LinkedIn), collaboration (such as applications like Twitter) and commerce (such as classified sites, Craigslist and eBay).
Purewire is offering access to PurewireTrust.org and TweetGrade.com free of charge as a contribution to the technology community in support of the company’s mission to improve the online experience for both consumers and enterprises. As PurewireTrust.org becomes more widely used, Purewire can incorporate this security reputation into its Purewire Web Security Service, to better identify and block Web security threats.
-----
www.fayettefrontpage.com
Fayette Front Page
www.georgiafrontpage.com
Georgia Front Page
As the popularity of Twitter continues to skyrocket, criminals are taking note as well. Most recently, a "Best Video" scam attacked Twitter users, posting an update (or tweet) on compromised accounts that directed followers to a video prompting the purchase of rogue anti-virus software. Attacks such as this make it imperative to know the reputation of those people with whom you interact online. TweetGrade assures this trust by providing evidence of Twitter account legitimacy, protecting users from malicious or illegitimate accounts that attempt to send spam or spread malware.
The Purewire research team evaluated the use of Twitter to demonstrate the power of the TweetGrade service, and based on a seven-million user sample has found data that point to two overall realities:
First, many Twitter users abandon their accounts shortly after creating them, and a significant percentage show no signs of account activity.
* 40 percent of Twitter users have not tweeted since their first day on Twitter, evidence that the account was most likely created and subsequently abandoned.
* Approximately 25 percent of Twitter users are not following anyone, while two-thirds are following fewer than 10 people, evidence that the account was created but is largely dormant.
Second, Twitter is used more as a mass medium for receiving information, rather than as a way to interact with others. Proof is shown by evaluating the followers and friends of Twitter users:
* More than one-third of Twitter users have not posted a single tweet, and almost 80 percent of users have fewer than 10 tweets, evidence that while Twitter is billed as a great collaboration tool, a large number of users are there to consume content, not distribute it.
* Approximately 30 percent of Twitter users do not have any followers, and 80 percent of Twitter users have fewer than 10 followers, evidence that for many users, their posts are not being widely tracked or read.
* 50 percent of Twitter users are following more people than they have as followers, and another 30 percent of Twitter users are following the same number of people that are following them, evidence that users are aggressively trying to attract followers by hoping they will “follow back” but have been unsuccessful.
Additional details are available on the Purewire Web Security Blog located at http://blog.purewire.com/.
“There is a lot of noise on the Web, especially on Twitter lately with the buzz around Oprah, CNN and Ashton Kutcher. That makes it hard to wade through everything and understand who you’re interacting with online,” said Dr. Steve Webb, research scientist at Purewire, Inc. “Purewire is all about deciphering Web activity so that users know what and who they can trust, and TweetGrade is the first service that takes a comprehensive look at a Twitter account’s true legitimacy. Through our experience with PurewireTrust.org and our patent-pending Purewire Trust technology, we are able to offer Twitter users the transparency needed to identify and sort out the associated security threats.”
How TweetGrade Works
TweetGrade evaluates Twitter users based on their interactions on Twitter. The analysis is centered on a variety of inputs such as frequency and content of tweets, number of followers, number of those following and activity level. Users receive a simple letter grade that ranges from an 'A+' to an 'F' to verify their reputation on Twitter and are able to share their TweetGrade with the Twitter community with a simple push of a button.
Purewire is in the process of integrating TweetGrade reputations into a user’s Purewire Trust reputation. PurewireTrust.org launched in March at DEMO 2009, where the company received a DEMOgod award for its innovation. Purewire Trust builds reputations that protect individuals in user-to-user relationships for communication (such as social networks like Facebook and LinkedIn), collaboration (such as applications like Twitter) and commerce (such as classified sites, Craigslist and eBay).
Purewire is offering access to PurewireTrust.org and TweetGrade.com free of charge as a contribution to the technology community in support of the company’s mission to improve the online experience for both consumers and enterprises. As PurewireTrust.org becomes more widely used, Purewire can incorporate this security reputation into its Purewire Web Security Service, to better identify and block Web security threats.
-----
www.fayettefrontpage.com
Fayette Front Page
www.georgiafrontpage.com
Georgia Front Page
Thursday, April 30, 2009
Is Your Computer Safe From the Swine Flu?
There have been numerous reports of scam artists attacking computers using the swine flu as bait. Below is the story released yesterday by the Consumer Affairs on the subject.
Watch Out For Swine Flu Scams
Con artists quick to exploit new situation
April 29, 2009
It didn’t take scammers long to latch on to the latest hot button topic to try and make a quick buck. Scams built around fears of swine flu are proliferating quickly across the Internet.
The U.S. Computer Emergency Readiness Team issued an alert this week, warning.....http://www.consumeraffairs.com/news04/2009/04/swineflu09.html
-----
www.fayettefrontpage.com
Fayette Front Page
www.georgiafrontpage.com
Georgia Front Page
Twitter @GAFrontPage
Watch Out For Swine Flu Scams
Con artists quick to exploit new situation
April 29, 2009
It didn’t take scammers long to latch on to the latest hot button topic to try and make a quick buck. Scams built around fears of swine flu are proliferating quickly across the Internet.
The U.S. Computer Emergency Readiness Team issued an alert this week, warning.....http://www.consumeraffairs.com/news04/2009/04/swineflu09.html
-----
www.fayettefrontpage.com
Fayette Front Page
www.georgiafrontpage.com
Georgia Front Page
Twitter @GAFrontPage
Monday, April 27, 2009
Circulation of Fraudulent E-mail Claiming To Be From U.S. Customs and Border Protection (CBP)
A spam e-mail claiming to be from former CBP Assistant Commissioner, Thomas S. Winkowski, is currently being circulated. This attempt to defraud is the typical e-mail scam using the name and reputation of a federal government official to create an air of authenticity.
The spam e-mail indicates the CBP has stopped a Diplomat who is carrying a consignment
to be delivered to the recipient's residence. This consignment allegedly contains millions of dollars, which is revealed to be an inheritance for the e-mail recipient.
As with many other scams, this e-mail advises the recipient they will be permitted to access this inheritance once the recipient has given the sender of the e-mail their personal information.
This e-mail is a hoax. Do not respond.
The U.S. CBP does not send unsolicited e-mails. Consumers should not respond to unsolicited e-mails or click on any embedded links, as they may contain viruses or malware.
It is imperative consumers guard their personally identifiable information (PII). Examples of a person's PII include, but are not limited to: date of birth; social security number; and
bank account numbers. Providing your PII will compromise your identity.
If you have received this e-mail, or a similar e-mail, please file a complaint at www.IC3.gov.
-----
www.fayettefrontpage.com
Fayette Front Page
www.georgiafrontpage.com
Georgia Front Page
Follow us on Twitter: @GAFrontPage
The spam e-mail indicates the CBP has stopped a Diplomat who is carrying a consignment
to be delivered to the recipient's residence. This consignment allegedly contains millions of dollars, which is revealed to be an inheritance for the e-mail recipient.
As with many other scams, this e-mail advises the recipient they will be permitted to access this inheritance once the recipient has given the sender of the e-mail their personal information.
This e-mail is a hoax. Do not respond.
The U.S. CBP does not send unsolicited e-mails. Consumers should not respond to unsolicited e-mails or click on any embedded links, as they may contain viruses or malware.
It is imperative consumers guard their personally identifiable information (PII). Examples of a person's PII include, but are not limited to: date of birth; social security number; and
bank account numbers. Providing your PII will compromise your identity.
If you have received this e-mail, or a similar e-mail, please file a complaint at www.IC3.gov.
-----
www.fayettefrontpage.com
Fayette Front Page
www.georgiafrontpage.com
Georgia Front Page
Follow us on Twitter: @GAFrontPage
Friday, March 27, 2009
MyWireless.org Consumer Advisory - Beware of a New Form of an Old Scam: 'Missed Calls' from International Area Codes '649' and '809'
/PRNewswire-USNewswire/ -- Today the national consumer advocacy coalition MyWireless.org(R) warned wireless consumers across the country about the latest twist on a scam 'missed call' scheme. Wireless companies have detected a pattern of calls that ring their customers' number once or twice and then disconnect. When the number appears on the customer's cell phone as a missed call, it appears to be a typical domestic three-digit phone number starting with the "649" area code. If the customer decides to return the missed call, the call is returned to an Adult Entertainment chat line in the Turks and Caicos, outside the reach of U.S. regulators. While wireless companies are working to block suspicious numbers on their networks, some individuals may be victims of this and similar schemes involving international area codes and end up being billed for expensive international call and chat line charges.
Brian Johnston, MyWireless.org's Director of Communications and Federal Advocacy said, "Unfortunately, this type of scam has become a fairly common occurrence in recent years. Scamsters in the past have tricked consumers into making expensive calls to international chat lines by leaving a message on answering machines, e-mail accounts, and now cell phone call logs," he continued, "urging the customer to call a number in the "809," "284," "876" (or some other) international area code to collect a prize, find out about a sick relative, etc., by engaging in chat."
MyWireless.org urges wireless consumers to always check an area code first before returning a call to an unknown caller. Be skeptical about area codes you don't recognize, especially: "649" (Turks and Caicos); "809" (Dominican Republic); "284" (British Virgin Islands); "876" (Jamaica); "758" (St. Lucia); or "664" (Montserrat). There are dozens of area codes (mostly in the Caribbean islands) which connect callers to an international telephone number. In addition, if you do not make international calls, ask your wireless carrier to block outgoing international calls on your account.
For more information: The Federal Trade Commission and the Federal Communications Commission have issued consumer advisories on this subject, and these scams have also been identified by the National Fraud Information Center (NFIC) and the Better Business Bureau (BBB) as potentially costing victims lots of money, since U.S. consumers are unaware at the time of the international number expense until they receive their monthly bill. If you suspect you have received a form of this 'spoofed call,' and would like to file a complaint, please see the FTC Fact Sheet on International Telephone Number Scams: http://www.ftc.gov/bcp/edu/pubs/consumer/telemarketing/tel05.pdf, and the similar FCC Consumer Advisory: http://www.fcc.gov/cgb/consumerfacts/809.html, for reporting contacts.
-----
www.fayettefrontpage.com
Fayette Front Page
www.georgiafrontpage.com
Georgia Front Page
Brian Johnston, MyWireless.org's Director of Communications and Federal Advocacy said, "Unfortunately, this type of scam has become a fairly common occurrence in recent years. Scamsters in the past have tricked consumers into making expensive calls to international chat lines by leaving a message on answering machines, e-mail accounts, and now cell phone call logs," he continued, "urging the customer to call a number in the "809," "284," "876" (or some other) international area code to collect a prize, find out about a sick relative, etc., by engaging in chat."
MyWireless.org urges wireless consumers to always check an area code first before returning a call to an unknown caller. Be skeptical about area codes you don't recognize, especially: "649" (Turks and Caicos); "809" (Dominican Republic); "284" (British Virgin Islands); "876" (Jamaica); "758" (St. Lucia); or "664" (Montserrat). There are dozens of area codes (mostly in the Caribbean islands) which connect callers to an international telephone number. In addition, if you do not make international calls, ask your wireless carrier to block outgoing international calls on your account.
For more information: The Federal Trade Commission and the Federal Communications Commission have issued consumer advisories on this subject, and these scams have also been identified by the National Fraud Information Center (NFIC) and the Better Business Bureau (BBB) as potentially costing victims lots of money, since U.S. consumers are unaware at the time of the international number expense until they receive their monthly bill. If you suspect you have received a form of this 'spoofed call,' and would like to file a complaint, please see the FTC Fact Sheet on International Telephone Number Scams: http://www.ftc.gov/bcp/edu/pubs/consumer/telemarketing/tel05.pdf, and the similar FCC Consumer Advisory: http://www.fcc.gov/cgb/consumerfacts/809.html, for reporting contacts.
-----
www.fayettefrontpage.com
Fayette Front Page
www.georgiafrontpage.com
Georgia Front Page
Friday, February 6, 2009
Online Scam Affecting E-card Recipients
/PRNewswire-FirstCall/ -- An e-card scam that misleadingly directs recipients to inappropriate content continues to plague users. The issue was originally reported over the holiday season and has continued through the first of the year, affecting millions of consumers. With the scam becoming more prevalent, Egreetings.com, an online division of American Greetings Corp (NYSE:AM) , wants to help educate users on ensuring safe receipt of e-cards.
In this recent scam, users receive an email alerting them of an e-card they have received from a reputable site. Once they open the email they are referenced to follow a third party link in the message field of the e-card. After clicking on this link the recipient is led to another site with mature and inappropriate content.
"This issue is affecting many e-card sites, and our security team is working around the clock to help keep our users safe," said James Chou, CTO AG Interactive. "Due to the complex nature of this scam, and our desire to see it stopped as soon as possible, we have also contacted the authorities to assist us in our efforts. But until the issue is completely resolved, we want to be sure that our users know what to look for."
Chou notes that the very best advice to ensure your safety in retrieving legitimate e-cards is to never click on, or copy and paste in your browser, a link within the body of an e-card message. Most reputable sites suggest recipients go to their main page by directly typing in the site URL. Once there users can enter the code found in the original email to retrieve their greeting.
Other tips to ensure safe receipt of e-cards:
-- Always be sure that you recognize the sender. The name and/or email
address of the individual sending the card will always be in the
subject line. If you do not recognize the name or address, proceed
with caution or immediately delete the email.
-- Be especially cautious of any emails with "secret admirer" in the
"from" field, as many of those affected by the recent scam have noted
this.
-- If you receive an email stating that you have sent an e-card that you
do not recognize, please know that your email address and account were
not compromised through your membership.
For more information on ensuring safe receipt of your e-cards, visit the Egreetings.com protection resource center.
-----
www.fayettefrontpage.com
Fayette Front Page
www.georgiafrontpage.com
Georgia Front Page
In this recent scam, users receive an email alerting them of an e-card they have received from a reputable site. Once they open the email they are referenced to follow a third party link in the message field of the e-card. After clicking on this link the recipient is led to another site with mature and inappropriate content.
"This issue is affecting many e-card sites, and our security team is working around the clock to help keep our users safe," said James Chou, CTO AG Interactive. "Due to the complex nature of this scam, and our desire to see it stopped as soon as possible, we have also contacted the authorities to assist us in our efforts. But until the issue is completely resolved, we want to be sure that our users know what to look for."
Chou notes that the very best advice to ensure your safety in retrieving legitimate e-cards is to never click on, or copy and paste in your browser, a link within the body of an e-card message. Most reputable sites suggest recipients go to their main page by directly typing in the site URL. Once there users can enter the code found in the original email to retrieve their greeting.
Other tips to ensure safe receipt of e-cards:
-- Always be sure that you recognize the sender. The name and/or email
address of the individual sending the card will always be in the
subject line. If you do not recognize the name or address, proceed
with caution or immediately delete the email.
-- Be especially cautious of any emails with "secret admirer" in the
"from" field, as many of those affected by the recent scam have noted
this.
-- If you receive an email stating that you have sent an e-card that you
do not recognize, please know that your email address and account were
not compromised through your membership.
For more information on ensuring safe receipt of your e-cards, visit the Egreetings.com protection resource center.
-----
www.fayettefrontpage.com
Fayette Front Page
www.georgiafrontpage.com
Georgia Front Page
Tuesday, February 3, 2009
Webroot Threat Advisory: Phony Warnings from the Federal Reserve Bank Aim to Swindle Americans
/PRNewswire/ -- Webroot, a leading security provider for the consumer, enterprise and SMB markets, has detected a phishing scam exploiting the names of the Federal Reserve Bank and other federal entities to fool consumers into clicking Web links that infect their PCs with spyware.
A phony e-mail from the Federal Reserve Bank warns of a "large-scale phishing attack" on banks and credit unions that took place January 21. A link to "more detailed information about affected banks and U.S. Treasury restrictions" leads to a fake Web site that infects victims' computers with malware designed to harvest their Web site and POP3 e-mail account usernames and passwords.
Webroot has identified the malware as Trojan-Backdoor-Graypigeon deploying malware via drive-by download. The cyber criminals behind the scam have recycled the e-mail message a number of times; the FDIC reported a previous version of the e-mail January 20. But the domains linked in the message continually change and suggest the message's origin may be legitimate. All point to one PC on China Railcom's IP address space that was hijacked to carry out the phishing attacks.
"Webroot has uncovered a new twist on phishing for financial gain," said Mike Kronenberg, chief technology officer, Consumer Business, Webroot. "In this case, phishers are capitalizing on widespread concern over the current state of the U.S. finance industry. Over 3.5 million Americans fell victim to phishing in 2007 according to recent research, and we can expect scammers to continue launching attacks against unsuspecting people. PC users should protect themselves by always avoiding unfamiliar URLs and questionable e-mails, and by having proven antispyware, antivirus and firewall software in place."
The malware and some of the domains identified as part of this scam are now blocked by Webroot(R) Internet Security Essentials.
-----
www.fayettefrontpage.com
Fayette Front Page
Community News You Can Use
Fayetteville, Peachtree City, Tyrone
www.georgiafrontpage.com
Georgia Front Page
A phony e-mail from the Federal Reserve Bank warns of a "large-scale phishing attack" on banks and credit unions that took place January 21. A link to "more detailed information about affected banks and U.S. Treasury restrictions" leads to a fake Web site that infects victims' computers with malware designed to harvest their Web site and POP3 e-mail account usernames and passwords.
Webroot has identified the malware as Trojan-Backdoor-Graypigeon deploying malware via drive-by download. The cyber criminals behind the scam have recycled the e-mail message a number of times; the FDIC reported a previous version of the e-mail January 20. But the domains linked in the message continually change and suggest the message's origin may be legitimate. All point to one PC on China Railcom's IP address space that was hijacked to carry out the phishing attacks.
"Webroot has uncovered a new twist on phishing for financial gain," said Mike Kronenberg, chief technology officer, Consumer Business, Webroot. "In this case, phishers are capitalizing on widespread concern over the current state of the U.S. finance industry. Over 3.5 million Americans fell victim to phishing in 2007 according to recent research, and we can expect scammers to continue launching attacks against unsuspecting people. PC users should protect themselves by always avoiding unfamiliar URLs and questionable e-mails, and by having proven antispyware, antivirus and firewall software in place."
The malware and some of the domains identified as part of this scam are now blocked by Webroot(R) Internet Security Essentials.
-----
www.fayettefrontpage.com
Fayette Front Page
Community News You Can Use
Fayetteville, Peachtree City, Tyrone
www.georgiafrontpage.com
Georgia Front Page
Thursday, October 16, 2008
Teaching Consumers On-Line Safety Easiest When They Take the Bait
(BUSINESS WIRE)--The Anti-Phishing Working Group (APWG) and Carnegie Mellon University’s Supporting Trust Decisions Project have established a phishing page redirect initiative that protects global online consumers who have been tricked into clicking links in scam emails by delivering them to Web pages that instruct them on the dangers of phishing – and how to avoid them. The program was announced today at the APWG conference in Atlanta.
The AWPG/Carnegie Mellon Phishing Education Landing Page program builds on the philosophy of using the “teachable moment” to warn users immediately after they’ve fallen for a phishing lure and then give them on-line safety instruction precisely at a time when they are receptive to it. Phishing sites are designed to resemble Web sites of legitimate businesses, such as banks and online retailers, to trick people into revealing credit card numbers, bank accounts or login names and passwords. Actionable messaging will help consumers to avoid falling victim to these scams a second time.
“We are excited about the opportunity to educate consumers as they are falling victim to a phishing site,” said Dr. Laura Mather, Managing Director of Operational Policy for the APWG and CEO of Silver Tail Systems. “We see this initiative as having real impact in helping people understand when they have received a phishing communication so that they can protect themselves going forward.”
This education-at-time-of-action is accomplished by leveraging the URLs of the phishing sites themselves after anti-phishing investigators have identified the sites and shut them down. Instead of leaving the URL file blank, returning a ‘PAGE NOT FOUND’ message to consumers following phishing links, they will be served a page of instruction on how to avoid phishing and reduce the risk of falling victim to electronic crime. (Redirect scripts placed at the sanitized phishing URL will automatically forward the advisory content.)
“Our research has shown that most Internet users don’t know very much about online scams and don’t realize that there are some simple things they can do to protect themselves,” said Dr. Lorrie Cranor, an associate professor of computer science and engineering & public policy at Carnegie Mellon and director of the Supporting Trust Decisions Project.
Ponnurangam Kumaraguru, a computer science Ph.D. student who is leading the effort to design and evaluate anti-phishing training materials at Carnegie Mellon added, “Nobody wants to spend their time taking on-line safety courses. But we’ve demonstrated that users are receptive to on-line safety instruction immediately after they fall for a phishing attack and they tend to remember this instruction."
The phishing education landing page developed by APWG and Carnegie Mellon teaches would-be victims not to give out personal information upon email request and to use a skeptical eye in judging online communications.
The implementation of the program depends on the participation of both takedown service providers and the ISPs and other companies whose servers have been co-opted to host phishing sites. The APWG is already successfully recruiting companies that perform phishing site takedowns, victimized brandholders and trade associations to encourage ISPs and other organizations that remove phish sites to use the APWG’s education landing page program.
The program is based on a similar program initiated by Bank of America in 2007. The APWG/Carnegie Mellon program builds on Bank of America’s ideas by creating a page that can be used for phishing site against any brand. Bank of America has already implemented the APWG/Carnegie Mellon program.
“Bank of America is committed to providing its customers with industry leading security tools and advice to protect them and enhance their overall customer experience. Educating our customers about the risks of identity theft and fraud is critical,” says David Shroyer, SVP for eCommerce Online Security at Bank of America.
"We know from experience that an educated customer is the best defense against fraud, and with this program we are educating our customers at the point of incidence, and letting customers know that we are working to protect them,” Mr. Shroyer said.
The APWG/Carnegie Mellon scheme will augment the usual procedure for communicating to the hosting organization about phishing sites. Instead of asking that the site be disabled and file content associated with the phishing URL removed, the takedown provider or victimized brandholder would request that the URL be preserved and a redirect script send the duped user to a webpage hosted by the APWG.
The education landing page will automatically determine whether the user is using a PC or laptop or handheld device and vend the device-appropriate page. Users of PDAs and Web-enabled cell phones will receive a page exclusively of text. People using PCs and laptops will receive an enhanced page of text, graphics and a number of links to online resources.
The APWG/Carnegie Mellon scheme will augment the usual procedure for communicating to the hosting organization about phishing sites. Instead of asking that the site be disabled and file content associated with the phishing URL removed, the takedown provider or victimized brandholder would request that the URL be preserved and a redirect script send the duped user to a webpage hosted by the APWG.
The APWG page will automatically determine whether the user is using a PC or laptop or handheld device and vend the device-appropriate page. Users of PDAs and Web-enabled cell phones will receive a page exclusively of text. People using PCs and laptops will receive an enhanced page of text, graphics and a number of links to online resources.
“This initiative gives takedown teams, ISPs, registrars, and registries the opportunity to take one more step in protecting consumers against identity theft and the other crimes perpetrated by Phishers,” said Dr. Mather.
As a next step, the APWG will organize the translation of the pages into various languages to serve the larger international community of consumers, brandholders and ISPs who are confronting the threats of electronic crime and engaging questions of efficacious consumer education.
Links:
Redirect education page: http://education.apwg.org/r/en/
Text only redirect education page: http://education.apwg.org/r/index.html
About the redirect education page initiative: http://education.apwg.org/r/about.html
About the APWG: The APWG is an industry, founded as the Anti-Phishing Working Group in 2003, is an industry, law enforcement and government coalition focused on eliminating the identity theft and fraud that result from the growing problem of phishing, email spoofing, and crimeware. Membership is open to qualified financial institutions, online retailers, ISPs, the law enforcement community and solutions providers. There are more than 1,800 companies and government agencies worldwide participating in the APWG and more than 3,200 members. The APWG's Web site (www.antiphishing.org) offers the public and industry information about phishing and email fraud, including identification and promotion of pragmatic technical solutions that provide immediate protection. APWG's corporate sponsors include: 8e6 Technologies, AT&T (T), Able NV, Afilias Ltd., AhnLab, BillMeLater, BBN Technologies, BlueStreak, BrandMail, BrandProtect, Bsecure Technologies, Cisco (CSCO), Clear Search, Cloudmark, Cydelity, Cyveillance, DigiCert, DigitalEnvoy, DigitalResolve, Digital River, Earthlink (ELNK), eBay/PayPal (EBAY), Entrust (ENTU), Experian, eEye, Fortinet, FraudWatch International, FrontPorch, F-Secure, Goodmail Systems, Grisoft, GeoTrust, GlobalSign, GoDaddy, Goodmail Systems, GuardID Systems, HomeAway, IronPort, HitachiJoHo, ING Bank, Iconix, Internet Identity, Internet Security Systems, IOvation, IS3, IT Matrix, Kaspersky Labs, Lenos Software, LightSpeed Systems, MailFrontier, MailShell, MarkMonitor, McAfee (MFE), MasterCard, MessageLevel, Microsoft (MSFT), MicroWorld, Mirapoint, MySpace (NWS), MyPW, MX Logic, NameProtect, National Australia Bank (ASX: NAB) Netcraft, NetStar, Network Solutions, Panda Software, Phoenix Technologies Inc. (PTEC), Phorm, SalesForce, Radialpoint, RSA Security (EMC), SecureBrain, Secure Computing (SCUR), S21sec, Sigaba, SoftForum, SOPHOS, SquareTrade, SurfControl, Symantec (SYMC), TDS Telecom, Telefonica (TEF), Trend Micro (TMIC), Tricerion, TriCipher, TrustedID, Tumbleweed Communications (TMWD), SurfControl (SRF.L), Vasco (VDSI), VeriSign (VRSN), Visa, Websense Inc. (WBSN) and Yahoo! (YHOO)
About the Carnegie Mellon Supporting Trust Decisions Project. The Supporting Trust Decisions Project (http://cups.cs.cmu.edu/trust) is a research project affiliated with Carnegie Mellon University’s CyLab and the CMU Usable Privacy and Security Laboratory. The project has developed a number of approaches to end-user security education as well as automated tools for detecting phishing attacks. These user education tools and phishing filters are being commercialized by Wombat Security Technologies, Inc. This project is sponsored by the US National Science Foundation, Fundação para a Ciência e Tecnologia Portugal under a grant from the Information and Communications Technology Institute at Carnegie Mellon, and by the Army Research Office.
-----
www.fayettefrontpage.com
Fayette Front Page
www.georgiafrontpage.com
Georgia Front Page
News to Use in Fayetteville, Atlanta, Macon, Peachtree City and all of Georgia
The AWPG/Carnegie Mellon Phishing Education Landing Page program builds on the philosophy of using the “teachable moment” to warn users immediately after they’ve fallen for a phishing lure and then give them on-line safety instruction precisely at a time when they are receptive to it. Phishing sites are designed to resemble Web sites of legitimate businesses, such as banks and online retailers, to trick people into revealing credit card numbers, bank accounts or login names and passwords. Actionable messaging will help consumers to avoid falling victim to these scams a second time.
“We are excited about the opportunity to educate consumers as they are falling victim to a phishing site,” said Dr. Laura Mather, Managing Director of Operational Policy for the APWG and CEO of Silver Tail Systems. “We see this initiative as having real impact in helping people understand when they have received a phishing communication so that they can protect themselves going forward.”
This education-at-time-of-action is accomplished by leveraging the URLs of the phishing sites themselves after anti-phishing investigators have identified the sites and shut them down. Instead of leaving the URL file blank, returning a ‘PAGE NOT FOUND’ message to consumers following phishing links, they will be served a page of instruction on how to avoid phishing and reduce the risk of falling victim to electronic crime. (Redirect scripts placed at the sanitized phishing URL will automatically forward the advisory content.)
“Our research has shown that most Internet users don’t know very much about online scams and don’t realize that there are some simple things they can do to protect themselves,” said Dr. Lorrie Cranor, an associate professor of computer science and engineering & public policy at Carnegie Mellon and director of the Supporting Trust Decisions Project.
Ponnurangam Kumaraguru, a computer science Ph.D. student who is leading the effort to design and evaluate anti-phishing training materials at Carnegie Mellon added, “Nobody wants to spend their time taking on-line safety courses. But we’ve demonstrated that users are receptive to on-line safety instruction immediately after they fall for a phishing attack and they tend to remember this instruction."
The phishing education landing page developed by APWG and Carnegie Mellon teaches would-be victims not to give out personal information upon email request and to use a skeptical eye in judging online communications.
The implementation of the program depends on the participation of both takedown service providers and the ISPs and other companies whose servers have been co-opted to host phishing sites. The APWG is already successfully recruiting companies that perform phishing site takedowns, victimized brandholders and trade associations to encourage ISPs and other organizations that remove phish sites to use the APWG’s education landing page program.
The program is based on a similar program initiated by Bank of America in 2007. The APWG/Carnegie Mellon program builds on Bank of America’s ideas by creating a page that can be used for phishing site against any brand. Bank of America has already implemented the APWG/Carnegie Mellon program.
“Bank of America is committed to providing its customers with industry leading security tools and advice to protect them and enhance their overall customer experience. Educating our customers about the risks of identity theft and fraud is critical,” says David Shroyer, SVP for eCommerce Online Security at Bank of America.
"We know from experience that an educated customer is the best defense against fraud, and with this program we are educating our customers at the point of incidence, and letting customers know that we are working to protect them,” Mr. Shroyer said.
The APWG/Carnegie Mellon scheme will augment the usual procedure for communicating to the hosting organization about phishing sites. Instead of asking that the site be disabled and file content associated with the phishing URL removed, the takedown provider or victimized brandholder would request that the URL be preserved and a redirect script send the duped user to a webpage hosted by the APWG.
The education landing page will automatically determine whether the user is using a PC or laptop or handheld device and vend the device-appropriate page. Users of PDAs and Web-enabled cell phones will receive a page exclusively of text. People using PCs and laptops will receive an enhanced page of text, graphics and a number of links to online resources.
The APWG/Carnegie Mellon scheme will augment the usual procedure for communicating to the hosting organization about phishing sites. Instead of asking that the site be disabled and file content associated with the phishing URL removed, the takedown provider or victimized brandholder would request that the URL be preserved and a redirect script send the duped user to a webpage hosted by the APWG.
The APWG page will automatically determine whether the user is using a PC or laptop or handheld device and vend the device-appropriate page. Users of PDAs and Web-enabled cell phones will receive a page exclusively of text. People using PCs and laptops will receive an enhanced page of text, graphics and a number of links to online resources.
“This initiative gives takedown teams, ISPs, registrars, and registries the opportunity to take one more step in protecting consumers against identity theft and the other crimes perpetrated by Phishers,” said Dr. Mather.
As a next step, the APWG will organize the translation of the pages into various languages to serve the larger international community of consumers, brandholders and ISPs who are confronting the threats of electronic crime and engaging questions of efficacious consumer education.
Links:
Redirect education page: http://education.apwg.org/r/en/
Text only redirect education page: http://education.apwg.org/r/index.html
About the redirect education page initiative: http://education.apwg.org/r/about.html
About the APWG: The APWG is an industry, founded as the Anti-Phishing Working Group in 2003, is an industry, law enforcement and government coalition focused on eliminating the identity theft and fraud that result from the growing problem of phishing, email spoofing, and crimeware. Membership is open to qualified financial institutions, online retailers, ISPs, the law enforcement community and solutions providers. There are more than 1,800 companies and government agencies worldwide participating in the APWG and more than 3,200 members. The APWG's Web site (www.antiphishing.org) offers the public and industry information about phishing and email fraud, including identification and promotion of pragmatic technical solutions that provide immediate protection. APWG's corporate sponsors include: 8e6 Technologies, AT&T (T), Able NV, Afilias Ltd., AhnLab, BillMeLater, BBN Technologies, BlueStreak, BrandMail, BrandProtect, Bsecure Technologies, Cisco (CSCO), Clear Search, Cloudmark, Cydelity, Cyveillance, DigiCert, DigitalEnvoy, DigitalResolve, Digital River, Earthlink (ELNK), eBay/PayPal (EBAY), Entrust (ENTU), Experian, eEye, Fortinet, FraudWatch International, FrontPorch, F-Secure, Goodmail Systems, Grisoft, GeoTrust, GlobalSign, GoDaddy, Goodmail Systems, GuardID Systems, HomeAway, IronPort, HitachiJoHo, ING Bank, Iconix, Internet Identity, Internet Security Systems, IOvation, IS3, IT Matrix, Kaspersky Labs, Lenos Software, LightSpeed Systems, MailFrontier, MailShell, MarkMonitor, McAfee (MFE), MasterCard, MessageLevel, Microsoft (MSFT), MicroWorld, Mirapoint, MySpace (NWS), MyPW, MX Logic, NameProtect, National Australia Bank (ASX: NAB) Netcraft, NetStar, Network Solutions, Panda Software, Phoenix Technologies Inc. (PTEC), Phorm, SalesForce, Radialpoint, RSA Security (EMC), SecureBrain, Secure Computing (SCUR), S21sec, Sigaba, SoftForum, SOPHOS, SquareTrade, SurfControl, Symantec (SYMC), TDS Telecom, Telefonica (TEF), Trend Micro (TMIC), Tricerion, TriCipher, TrustedID, Tumbleweed Communications (TMWD), SurfControl (SRF.L), Vasco (VDSI), VeriSign (VRSN), Visa, Websense Inc. (WBSN) and Yahoo! (YHOO)
About the Carnegie Mellon Supporting Trust Decisions Project. The Supporting Trust Decisions Project (http://cups.cs.cmu.edu/trust) is a research project affiliated with Carnegie Mellon University’s CyLab and the CMU Usable Privacy and Security Laboratory. The project has developed a number of approaches to end-user security education as well as automated tools for detecting phishing attacks. These user education tools and phishing filters are being commercialized by Wombat Security Technologies, Inc. This project is sponsored by the US National Science Foundation, Fundação para a Ciência e Tecnologia Portugal under a grant from the Information and Communications Technology Institute at Carnegie Mellon, and by the Army Research Office.
-----
www.fayettefrontpage.com
Fayette Front Page
www.georgiafrontpage.com
Georgia Front Page
News to Use in Fayetteville, Atlanta, Macon, Peachtree City and all of Georgia
Subscribe to:
Posts (Atom)
