Hundreds of thousands of Windows computers are believed to be
infected with a Trojan called "Clampi" that has been stealing
banking and other log-in information from infected PCs since 2007.
Clampi is also known as Ligats, Ilomo, or Rscan.
Clampi infects computers when people visit web sites hosting
malicious code that exploits vulnerabilities in browser plug-ins
Flash and ActiveX. When the computer is used to access a targeted
banking or other site, the log-in and other information is stolen.
Clampi has spread quickly through Microsoft-based networks in a
worm-like fashion in recent months.
Joe Steward, SecureWorks' director of malware research for the
Counter Threat Unit, has been researching the Clampi Trojan for
two years. He has identified 1,400 web sites in 70 different
countries out of 4,500 sites being targeted by the Trojan attack.
The sites include financial institutions, credit card companies,
online casinos, retail sites, utilities and brokerages.
SecureWorks recommends these best practices:
- Keep your anti-virus software up-to-date.
- Follow general security best practices.
- You may want to keep a computer dedicated only for online banking and bill pay use. Do not use this computer for surfing the web, or to send and receive email, since malicious web sites and email are two of the key malware infection vectors.
For more information, please visit the SecureWorks website
Bogus Cell Phone Text Message
MCU has learned of a new email phishing scam. This fraudulent
attempt to capture card numbers is done with an automated text
message referring to themselves as the CO-OP Services Credit
Union Customer Services Dept. from a four-digit phone number
of 3693. Read more >
NCUA Issues Fraud Alert
The NCUA issued a fraud alert about a recent phishing attempt to
obtain credit card account numbers and expiration dates.
Read more >
Con Artists Using IRS Logo for Money Scam
The Internal Revenue Service has issued an alert, warning that the
IRS name and logo is being used by fraudsters attempting to
access taxpayer financial information through email, telephone
and cell phone text messaging. Read more >
