Just wanted to bring some new virus/phsihing scam alerts to yall here in case you are not aware and can let your friends/family know also to not fall into the trap... these things happen everyday but this one uses an interesting method...
CDC has received reports of fraudulent emails (phishing) referencing a CDC sponsored State Vaccination Program.
The messages request that users must create a personal H1N1 (swine flu) Vaccination Profile on the cdc.gov website. The message then states that anyone that has reached the age of 18 has to have his/her personal Vaccination Profile on the cdc.gov site.
The CDC has NOT implemented a state vaccination program requiring registration on www.cdc.gov. Users that click on the email are at risk of having malicious code installed on their system. CDC reminds users to take the following steps to reduce the risk of being a victim of a phishing attack:
An example of the Phishing email follows:
- Do not follow unsolicited links and do not open or respond to unsolicited email messages.
- Use caution when visiting un-trusted websites.
- Use caution when entering personal information online.
Those who comply with the request won't be registering with the CDC-- they will be infecting their computers with a version of the Banker Trojan, which steals usernames and passwords from your online banking sessions.
Banker Trojan Details:
Not all antivirus software is able to detect this new variant of the Banker trojan, as seen in this VirusTotal report.2. For a description of what changes the Banker trojan makes to your system, see this ThreatExpert report3.