US-CERT Current Activity – Malicious Code Spreading via IRS Scam

by

US-CERT Current Activity – Malicious Code Spreading via IRS Scam: “—–BEGIN PGP SIGNED MESSAGE—–
Hash: SHA1

US-CERT Current Activity

Malicious Code Spreading via IRS Scam

Original release date: September 28, 2009 at 9:00 am
Last revised: September 28, 2009 at 9:00 am

US-CERT is aware of public reports of malicious code circulating via
spam email messages related to the IRS. The attacks arrive via an
unsolicited email message and may contain a subject line of ‘Notice of
Underreported Income.’ These messages may contain a link or
attachment. If users click on this link or open the attachment, they
may be infected with malicious code, including the Zeus Trojan.

US-CERT encourages users and administrators to take the following
measures to protect themselves:
* Review the How to Report and Identify Phishing, E-mail Scams and
Bogus IRS Web Sites document on the IRS website.
* Do not follow unsolicited web links or attachments in email
messages.
* Maintain up-to-date antivirus software.
* Refer to the Recognizing and Avoiding Email Scams (pdf) document
for more information on avoiding email scams.
* Refer to the Avoiding Social Engineering and Phishing Attacks
document for more information on social engineering attacks.

Relevant Url(s):
<http://www.us-cert.gov/cas/tips/ST04-014.html>

<http://www.us-cert.gov/reading_room/emailscams_0905.pdf>

<http://www.irs.gov/privacy/article/0,,id=179820,00.html?portlet=1>

====
This entry is available at
http://www.us-cert.gov/current/index.html#malicious_code_spreading_via_irs

—–BEGIN PGP SIGNATURE—–
Version: GnuPG v1.4.5 (GNU/Linux)

iQEVAwUBSsC2ZXIHljM+H4irAQKCLgf9EwB8/ucEitD42XGqz7W4O4GAdSjKDIL0
uZs4p5HVHnb6Eo0VkSd+isDk4tzZYonYd8oGN0AOjY6KwSrmMTy7yHJTfhY8Jepi
XoJ2WrnxT55gG76fBkJQpPq+D3eXauVMzHL8z6jhZO4j192z1aUEHkTUNs7i2l8k
WUcnWkTzAxVSRRpc7oOmAb27brsdhK2HRpmlSgvagwkvC8AQ3ME1u/YXk0dTZijE
EsaGNU1cGR6MoiA0cM0aun2fDSPhq3s4Brb0aSk09EEqDggSca4PtdAz53vM2roN
3PmkQ13WdLNzQXVRrc3LBjf9Jv4v7cWYapuK9ufvV9KHiGTfu9GVzw==
=O8yB
—–END PGP SIGNATURE—–

(Via Security News Collected by AWSODA-SYSTEMS.)

Advertisements

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s


%d bloggers like this: