Science Current Events | Science News | Brightsurf.com
 
Email a Friend Send to a friend
Printer Friendly Print Bogus e-mails from FDIC link computer users to viruses, says UAB computer forensics expert

Bogus e-mails from FDIC link computer users to viruses, says UAB computer forensics expert

October 28, 2009

BIRMINGHAM, Ala. - Cyber criminals are using fake messages claiming to be from the Federal Deposit Insurance Corporation (FDIC) to deliver a virus capable of stealing unsuspecting victims' bank passwords and other sensitive personal information, says Gary Warner, the director of research in computer forensics at the University of Alabama at Birmingham (UAB).

Warner says the spam is being delivered with one of two subject lines:




* FDIC has officially named your bank a failed bank
* You need to check your Bank Deposit Insurance Coverage

Warner says that once the message is opened the spam asks users to visit a specific Web site, a link to which is included in the message. Those that follow the link are taken to a page that asks them to click and download a copy of "your personal FDIC insurance file."

"Unfortunately, anyone who clicks that download link will be downloading a version of the Zeus Bot virus, which has the capacity to steal bank passwords and other financial and personal information," Warner says.

Warner and his research team in the UAB Spam Data Mine have been tracking the new spam for a number of days and report its delivery volume to be very high.

The spam claims to be from the e-mail address consumeralerts@fdic.gov, which is a real e-mail address used by the FDIC, but has obviously been forged by the malware distributors in this situation, Warner says.

"The cyber criminals behind this spam have gone to great lengths to mimic the logos and look of FDIC communications, including going so far as to forge an official FDIC e-mail address in an effort to confuse consumers into following links and downloading harmful programs," Warner says.

"As is the case with any agency or company e-mail, do not follow links or click downloads embedded in the messages. Instead, visit the site in question through your Web browser and log in as you normally would," he says. "If an entity has an important message for you, you'll be able to find it on its Web page.

"Legitimate companies will never ask you to download programs or enter your personal information via an e-mail."

University of Alabama at Birmingham



Related Computer Forensics Current Events and Computer Forensics News Articles
UAB Computer Forensics Links Fake Online Postcards to Most Prevalent U.S. Computer Virus
Fake Internet postcards circulating through e-mail inboxes worldwide are carrying links to the virus known as Zeus Bot, said Gary Warner, director of computer forensics at the University of Alabama at Birmingham (UAB). Zeus Bot has been named America's most pervasive computer Botnet virus by Network World magazine, reportedly infecting 3.6 million U.S. computers.

The EU becomes cyber Sherlock Holmes
How can you be sure your on-line transactions are secure, and find out if anybody has been siphoning off money from your credit card? The European Commission's Joint Research Centre (JRC) has developed a way of handling electronic information to protect the rights of cyberspace users and guard against fraud when buying on the Internet. The EU Cyber Tools On-Line Search for Evidence (CTOSE) project helps identify, secure, integrate and present electronic evidence on on-line criminal offences. It meets the challenge of clearly establishing what happens during an e-crime, or even a simple on-line transaction. The new approach developed in this project enables investigators to use "compute
More Computer Forensics Current Events and Computer Forensics News Articles
Computer Forensics For Dummies (For Dummies (Computer/Tech))

Computer Forensics For Dummies (For Dummies (Computer/Tech))
by Linda Volonino (Author), Reynaldo Anzaldua (Author)

Uncover a digital trail of e-evidence by using the helpful, easy-to-understand information in Computer Forensics For Dummies! Professional and armchair investigators alike can learn the basics of computer forensics, from digging out electronic evidence to solving the case. You won’t need a computer science degree to master e-discovery. Find and filter data in mobile devices, e-mail, and other Web-based technologies.

You’ll learn all about e-mail and Web-based forensics, mobile forensics, passwords and encryption, and other e-evidence found through VoIP, voicemail, legacy mainframes, and databases. You’ll discover how to use the latest forensic software, tools, and equipment to find the answers that you’re looking for in record time. When you understand how data is...

Hacking Exposed Computer Forensics, Second Edition: Computer Forensics Secrets & Solutions

Hacking Exposed Computer Forensics, Second Edition: Computer Forensics Secrets & Solutions
by Aaron Philipp (Author), David Cowen (Author), Chris Davis (Author)

"Provides the right mix of practical how-to knowledge in a straightforward, informative fashion that ties it all the complex pieces together with real-world case studies. ...Delivers the most valuable insight on the market. The authors cut to the chase of what people must understand to effectively perform computer forensic investigations." --Brian H. Karney, COO, AccessData Corporation

The latest strategies for investigating cyber-crime

Identify and investigate computer criminals of all stripes with help from this fully updated. real-world resource. Hacking Exposed Computer Forensics, Second Edition explains how to construct a high-tech forensic lab, collect prosecutable evidence, discover e-mail and system file clues, track wireless activity, and recover obscured...

Computer Forensics JumpStart (Jumpstart (Sybex))

Computer Forensics JumpStart (Jumpstart (Sybex))
by Michael Solomon (Author), Neil Broom (Author), Diane Barrett (Author)

At the heart of modern corporate crime and counter-terrorism investigations, computer forensics is now the fastest growing segment of IT and law enforcement. For everyone curious about this hot field, here is an in-depth introduction to the technological, social, and political issues at hand. Sybex’s JumpStart approach is ideal for those interested in computer forensics but not yet sure what it’s all about. It offers a complete overview of the basic skills and available certifications that can help to launch a new career.

Computer Forensics Library Boxed Set

Computer Forensics Library Boxed Set
by Keith J. Jones (Author), Richard Bejtlich (Author), Curtis W. Rose (Author), Dan Farmer (Author), Wietse Venema (Author), Brian Carrier (Author)

Praise for Forensic Discovery

"Farmer and Venema do for digital archaeology what Indiana Jones did for historical archaeology. Forensic Discovery unearths hidden treasures in enlightening and entertaining ways, showing how a time-centric approach to computer forensics reveals even the cleverest intruder. I highly recommend reading this book."
--Richard Bejtlich, TaoSecurity

Praise for Real Digital Forensics

"Real Digital Forensics is as practical as a printed book can be. In a very methodical fashion, the authors cover live response (Unix, Windows), network-based forensics following the NSM model (Unix, Windows), forensics duplication, common forensics analysis techniques (such as file recovery and Internet history review), hostile binary analysis (Unix, Windows),...

Guide to Computer Forensics and Investigations

Guide to Computer Forensics and Investigations
by Bill Nelson (Author), Amelia Phillips (Author), Frank Enfinger (Author), Christopher Steuart (Author)

Master the skills necessary to launch and complete a successful computer investigation with the updated edition of this highly successful book, Guide to Computer Forensics and Investigations. This text will teach readers how to conduct a high-tech investigation, from acquiring digital evidence to reporting its findings. Coverage includes how to set up a forensics lab, how to acquire the proper and necessary tools, and how to conduct the investigation and subsequent digital analysis. The comprehensive coverage and detailed know-how led to the book being listed as recommended reading by the FBI Forensics Communications the United States Certified reading room. The book features free downloads of the latest forensic software, so students become familiar with the tools of the trade.

EnCase Computer Forensics, includes DVD: The Official EnCE: EnCase Certified Examiner Study Guide

EnCase Computer Forensics, includes DVD: The Official EnCE: EnCase Certified Examiner Study Guide
by Steve Bunting (Author)

EnCE certification tells the world that you've not only mastered the use of EnCase Forensic Software, but also that you have acquired the in-depth forensics knowledge and techniques you need to conduct complex computer examinations. This official study guide, written by a law enforcement professional who is an expert in EnCE and computer forensics, provides the complete instruction, advanced testing software, and solid techniques you need to prepare for the exam.

Computer Forensics: Computer Crime Scene Investigation (Networking Series)

Computer Forensics: Computer Crime Scene Investigation (Networking Series)
by John R. Vacca (Author)

The Most Comprehensive, Up-to-Date, Reference on Computer Forensics! Using personal computers as their weapons, hackers and criminals (some only 11 years old) have attacked the Internet, government agencies, financial companies, small businesses, and the credit card accounts of unsuspecting individuals. This completely updated book/CD package provides a complete overview of computer forensics from information security issues to "crime scene investigation," seizure of data, determining the "fingerprints" of the crime, and tracking down the criminals. The book’s companion CD-ROM contains demos of the latest computer forensics software. Numerous exercises, case studies, and vignettes of actual crimes enhance the topics under discussion, and provide the reader with solutions to computer...

Windows Forensic Analysis DVD Toolkit, Second Edition

Windows Forensic Analysis DVD Toolkit, Second Edition
by Harlan Carvey (Author)

"If your job requires investigating compromised Windows hosts, you must read Windows Forensic Analysis."
-Richard Bejtlich, Coauthor of Real Digital Forensics and Amazon.com Top 500 Book Reviewer


"The Registry Analysis chapter alone is worth the price of the book."
-Troy Larson, Senior Forensic Investigator of Microsoft's IT Security Group

"I also found that the entire book could have been written on just registry forensics. However, in order to create broad appeal, the registry section was probably shortened. You can tell Harlan has a lot more to tell."
-Rob Lee, Instructor and Fellow at the SANS Technology Institute, coauthor of Know Your Enemy: Learning About Security Threats, 2E


Author Harlan Carvey has brought his best-selling book up-to-date to...

Computer Forensics: Incident Response Essentials

Computer Forensics: Incident Response Essentials
by Warren G. Kruse (Author), Jay G. Heiser (Author)

Written by two experts in digital investigation, and provides extensive information on how to handle the computer as evidence. Softcover.

File System Forensic Analysis

File System Forensic Analysis
by Brian Carrier (Author)

This is an advanced cookbook and reference guide for digital forensic practitioners. File System Forensic Analysis focuses on the file system and disk. The file system of a computer is where most files are stored and where most evidence is found; it also the most technically challenging part of forensic analysis. This book offers an overview and detailed knowledge of the file system and disc layout. The overview will allow an investigator to more easily find evidence, recover deleted data, and validate his tools. The cookbook section will show how to use the many open source tools for analysis, many of which Brian Carrier has developed himself.

© 2009 BrightSurf.com