Current Activity - Haitian Earthquake Disaster Email Scams and Search Engine Poisoning Campaigns

[Current Activity <us-cert () us-cert gov>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

US-CERT Current Activity

Haitian Earthquake Disaster Email Scams and Search Engine Poisoning Campaigns

Original release date: January 13, 2010 at 7:33 pm
Last revised: January 14, 2010 at 12:28 pm


US-CERT would like to warn users of potential email scams and search
engine poisoning campaigns that may circulate regarding the Haitian
Earthquake disaster. The scam emails may contain links or attachments
which may direct users to phishing or malware-laden websites.
Fraudulent search engine results may return similar malicious web
links to phishing and malware websites.

US-CERT encourages users to take the following measures to protect
themselves:
  * Do not follow unsolicited web links or attachments in email
    messages.
  * Maintain up-to-date antivirus software.
  * Review the Federal Trade Commission's Charity Checklist.
  * Verify the legitimacy of the email by contacting the organization
    directly through a trusted contact number. Trusted contact
    information can be found on the Better Business Bureau National
    Charity Report Index.
  * Refer to the Recognizing and Avoiding Email Scams (pdf) document
    for more information on avoiding email scams.
  * Refer to the Avoiding Social Engineering and Phishing Attacks
    document for more information on social engineering attacks.

Relevant Url(s):
<http://www.us-cert.gov/cas/tips/ST04-014.html>

<http://www.us-cert.gov/reading_room/emailscams_0905.pdf>

<http://www.ftc.gov/bcp/edu/pubs/consumer/telemarketing/tel01.shtm>

<http://www.bbb.org/charity-reviews/national/>

====
This entry is available at
http://www.us-cert.gov/current/index.html#haitian_earthquake_disaster_phishing_attacks

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.5 (GNU/Linux)

iQEVAwUBS09Vf9ucaIvSvh1ZAQKJPwgArq6Y8+f+CyQXGoRhxvLosRI8WZny1Sju
Tj3OzkvByg40xctC2cxqwoTeNDilMY6udrhupbShOGpM+ZQ/0F8gnFr9nQZIGCSQ
ph2Qv57Y5LyNUPUvG1IxmPbOXuaTAB9UPNp5OA+/5w+gFoyCpte4E9xWfJu1X5vA
uOw0N9hxjGETeYe35qAfNJQ7mDmUz+aaImOdKdG7Y6W9HEtV+6d+0vg9RslgKNd+
yx41GVTxStdjxCaBA4A0kVJYiEW9lsN2GeMlb7JB72ngKUkLNEFX4DLskDGcT6D5
uvHz5yU6nNMqdy6s/yMrl6gVWVBuYYhhv9C96Y393eRWjVym12fYQg==
=6zUq
-----END PGP SIGNATURE-----