You are not authorized to post comments.

Spam spoofs e-mail client

By Cara Garretson  Add a new comment

Summer appears to be the time of year when spammers get creative.

Over the past two months spammers have attempted to swindle e-mail users with honest spam, Swine Flu spam, and even romantic spam.

And summer’s not over yet.

Last week saw the emergence of spam that looks to users to be from the maker of their e-mail client. According to an August 19 post on one of Symantec’s security blogs, spammers are sending out messages that look like they come from popular e-mail programs, such as Microsoft’s Outlook. The message tells the user they must reconfigure their messaging client by clicking on the link embedded in the e-mail (Oh, if reconfiguring your e-mail client were only so easy!)

Instead the unsuspecting user who follows the link is sent to a malicious Web site where they think they’re downloading a new version of the messaging software, but malware is downloaded instead, which could lead to the theft of personal or financial information.

Now, if the spam recipient doesn’t use Outlook, that may be a dead giveaway that the e-mail is bogus. But the creator of these messages is going to some effort to make the e-mail appear legitimate, such as including a phone number to call should the user need assistance.

We’ve all gotten those ‘Welcome’ messages from our e-mail client in our in-box, so why wouldn’t we believe a message from the same source saying telling us to reconfigure our software?

Score one for the spammers.

Do you tweet? Follow me on Twitter here.

ITworld LIVE

SecurityWhite Papers & Webcasts

Webcast On Demand

Seven Deadly Sins of Cloud Security (Video)

As cloud computing gains popularity, too few people are aware of the security threats that are emerging. In this short video, experts from HP discuss the latest cloud security threats and explain measures to help overcome them. Hear about the seven deadly sins of cloud security and learn how to avoid becoming a victim of poor security in your cloud environment.Intel and the Intel logo are trademarks of Intel Corporation in the U.S. and/or other countries.

Sponsor: HP & Intel

White Paper

Establishing a Strategy for Database Security is No Longer Optional

The options for securing increasingly valuable databases are very broad and deep, and can be confusing. This research provides an overview of three categories of controls that should be implemented to ensure that enterprise data is protected in the most efficient and effective manner.

White Paper

Database Activity Monitoring Is Evolving

Read the analyst report and learn how you can leverage the core capabilities of a DAP solution for better database security.

White Paper

Protecting Against Database Attacks and Insider Threats: Top 5 Scenarios

Read this new eBook to learn the top five scenarios and essential best practices for preventing database attacks and insider threats.

Webcast On Demand

Distributed Database Security with Real-time Monitoring

View this demo and learn how IBM InfoSphere Guardium database activity monitoring can help protect your sensitive data in distributed DBMS environments with a holistic approach to data security and compliance.

Sponsor: IBM

See more White Papers | Webcasts

Ask a question

Ask a Question