Haitian Earthquake Disaster Email Scams

For those that are not on the US-CERT email list...


US-CERT Current Activity

Haitian Earthquake Disaster Email Scams and Search Engine Poisoning Campaigns

Original release date: January 13, 2010 at 7:33 pm
Last revised: January 13, 2010 at 7:33 pm


US-CERT would like to warn users of potential email scams and search
engine poisoning campaigns that may circulate regarding the Haitian
Earthquake disaster. The scam emails may contain links or attachments
which may direct users to phishing or malware-laden websites.
Fraudulent search engine results may return similar malicious web
links to phishing and malware websites.

US-CERT encourages users to take the following measures to protect
themselves:
* Do not follow unsolicited web links or attachments in email
messages.
* Maintain up-to-date antivirus software.
* Refer to the Recognizing and Avoiding Email Scams (pdf) document
for more information on avoiding email scams.
* Refer to the Avoiding Social Engineering and Phishing Attacks
document for more information on social engineering attacks.

Relevant Url(s):
<http://www.us-cert.gov/cas/tips/ST04-014.html>

<http://www.us-cert.gov/reading_room/emailscams_0905.pdf>

====
This entry is available at
http://www.us-cert.gov/current/index.html#haitian_earthquake_disaster_phishing_attacks

That is par for any major disaster or major happening like the Superbowl. They all result in a spate of phishes and maleware attacks.

Vultures always circle dead bodies, and unfortunately that applies to the human versions as well as the feathered kind.