CERT mailing list archives

Current Activity - Copyright Infringement Lawsuit Email Scam


From: Current Activity <us-cert () us-cert gov>
Date: Fri, 26 Mar 2010 15:23:31 -0400

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

US-CERT Current Activity

Copyright Infringement Lawsuit Email Scam

Original release date: March 26, 2010 at 3:20 pm
Last revised: March 26, 2010 at 3:20 pm


US-CERT is aware of public reports of an active email scam. These
emails, which appear to come from seemingly legitimate law firms,
indicate that someone has filed a copyright lawsuit against the
message recipient. The messages may contain malicious attachments or
web links. If a user opens the attachment or follows the link,
malicious code may be installed on the user's system.

US-CERT encourages users to take the following preventative measures
to help mitigate the security risks:
  * Do not follow unsolicited web links and do not open unsolicited
    email messages.
  * Maintain up-to-date antivirus software.
  * Use caution when visiting untrusted websites.
  * Refer to the Recognizing and Avoiding Email Scams (pdf) document
    for more information on avoiding email scams.
  * Refer to the Avoiding Social Engineering and Phishing Attacks
    document for more information on social engineering attacks.

Relevant Url(s):
<http://www.us-cert.gov/cas/tips/ST04-014.html>

<http://isc.sans.org/diary.html?storyid=8497>

<http://www.us-cert.gov/reading_room/emailscams_0905.pdf>

====
This entry is available at
http://www.us-cert.gov/current/index.html#copyright_infringement_lawsuit_email_scam

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.5 (GNU/Linux)

iQEVAwUBS60Jpz6pPKYJORa3AQK3RggAvRFMNjYQz86BVjII86UB33ROnoOc9yVG
guSO5jnFH+d+7UtTH13chV11DX5JA4Mb17gX3ZsPRwhG0Qf/TxTqU1yEnEG7nbY6
4uNPjy5NUS0uTHdszGg02y/9eYDKsFLsqnjS4+5zYXPF6wVEu4eolQHpz2dLUqzk
+yFJx7UpMmGBanqBknhitFDv38QAbBGDzdjt6uK/B8hkBNHlxh6g50MkwGOOTabj
YW05N32N/MDRB70P3JaWHYuqRaOPafbrzvduxQ6PiqiUMDegv9IqqNuLFdFBZE7A
vREOhN/CSpQdQzIPA++McgSJtCyfQe/58q4RiO/Hp79N8PdrUSk3lw==
=DnMe
-----END PGP SIGNATURE-----


Current thread: