Fake DHS email – “Give us $350 in the next 24 hours”

Every now and then, we see the 419 “Hitman deployed to kill you” missive doing the rounds. This time, we have a fake DHS notification telling you to pay a $350 fee within 24 hours – or else.

Categories:

Tags:

(Read more…)

The post Fake DHS email – “Give us $350 in the next 24 hours” appeared first on Malwarebytes Labs.

Continue reading Fake DHS email – “Give us $350 in the next 24 hours”

Hurricane Harvey scammers use disaster as phishing bait

As Hurricane Harvey continues to devastate southeast Texas, scammers are taking advantage of the catastrophe by sending phishing emails that can steal sensitive information or infect targeted machines, according to a new warning from US-CERT. Man-made and natural disasters are magnets for scammers and hackers looking to take advantage of people’s inclination to help or learn more, the agency warned, cautioning the public that “emails requesting donations from duplicitous charitable organizations commonly appear after major natural disasters.” US-CERT, which is part of the Department of Homeland Security, pointed to the Federal Trade Commission’s information on Wise Giving in the Wake of Hurricane Harvey as well as its own general guidance on Avoiding Social Engineering and Phishing Attacks. Expect more disaster and death in Texas. About 30,000 people are expected to seek emergency shelter, government officials said Tuesday, and 450,000 will seek federal aid. The rain total in Houston is expected to hit a massive […]

The post Hurricane Harvey scammers use disaster as phishing bait appeared first on Cyberscoop.

Continue reading Hurricane Harvey scammers use disaster as phishing bait

DHS watchdog’s fraud hotline spoofed in ID theft scam

The inspector general’s office in the Department of Homeland Security is warning that identity thieves and fraudsters are spoofing caller ID systems to make it look as if victims are being called from the IG’s anonymous tipline. “The perpetrators of the scam represent themselves as employees with ‘U.S. Immigration,’” the office states in a press release circulated Wednesday, and “demand to obtain or verify personally identifiable information from their victims through various tactics, including by telling individuals that they are the victims of identity theft.” “Many of the scammers reportedly have pronounced accents,” states the press release. The office said it wanted to remind the public that it “never uses its hotline number to make outgoing calls — the phone line is only used to receive information from the public.” The hotline remains “perfectly safe” for reporting “fraud, waste, abuse, or mismanagement within DHS components or programs,” the statement concludes. The office […]

The post DHS watchdog’s fraud hotline spoofed in ID theft scam appeared first on Cyberscoop.

Continue reading DHS watchdog’s fraud hotline spoofed in ID theft scam

DHS watchdog’s fraud hotline spoofed in ID theft scam

The inspector general’s office in the Department of Homeland Security is warning that identity thieves and fraudsters are spoofing caller ID systems to make it look as if victims are being called from the IG’s anonymous tipline. “The perpetrators of the scam represent themselves as employees with ‘U.S. Immigration,’” the office states in a press release circulated Wednesday, and “demand to obtain or verify personally identifiable information from their victims through various tactics, including by telling individuals that they are the victims of identity theft.” “Many of the scammers reportedly have pronounced accents,” states the press release. The office said it wanted to remind the public that it “never uses its hotline number to make outgoing calls — the phone line is only used to receive information from the public.” The hotline remains “perfectly safe” for reporting “fraud, waste, abuse, or mismanagement within DHS components or programs,” the statement concludes. The office […]

The post DHS watchdog’s fraud hotline spoofed in ID theft scam appeared first on Cyberscoop.

Continue reading DHS watchdog’s fraud hotline spoofed in ID theft scam

Apple thwarts Safari-based ransomware scheme with iOS 10.3 update

Apple’s newly released update to its mobile operating system fixes a crucial software bug in the Safari web browser that previously allowed scammers to spam users with JavaScript pop-ups, according to mobile security company Lookout. An attacker could execute a ransomware-style attack in past versions of iOS by abusing the pop-up dialogs in Safari, thereby locking victims out from using their web browser until a payment is received. In this scenario, victims would be typically redirected to a malicious website, which is designed to appear like it belongs to a faux law enforcement agency, where a payment — in the form of iTunes gift cards — is demanded for a fake “fine.” iOS 10.3 protects against this attack by making Safari run “on a per-tab basis so that if one tab is misbehaving, the user can close it out and/or move to another one,” a blog post by Lookout researchers […]

The post Apple thwarts Safari-based ransomware scheme with iOS 10.3 update appeared first on Cyberscoop.

Continue reading Apple thwarts Safari-based ransomware scheme with iOS 10.3 update