FBI Intelligence Note: "Boston Marathon Explosion" Spam Contains Exploit Kit

Thursday, April 18, 2013

FBI Intelligence Note: "Boston Marathon Explosion" Spam Contains Exploit Kit

Intelligence Note
Prepared by the Internet Crime Complaint Center (IC3)
Middle East Cyber Intelligence Unit (MECIU)

April 18, 2013

BEWARE OF POSSIBLE FRAUD ASSOCIATED WITH THE BOSTON MARATHON EXPLOSIONS
On 04/15/2013, two explosions occurred near the finish line of the Boston Marathon causing death and injury to spectators, as well as participants of the marathon. While Americans feel the need to assist or contribute to those affected by this tragedy; criminals see it as way to exploit contributor’s kindness. History has shown criminals utilize disasters to take advantage of those wanting to assist.

Individuals need to be aware of emerging fraud online associated with the explosions and how to take necessary precautions when using e-mail and social networking Web sites. As of 17 April 2013, the FBI has received indications that individuals may be using social media and e-mail to facilitate fraudulent activities online.

There have been reports of a Spam E-mail being circulated to lure potential victims to malware and exploits. The subject of the spam e-mail in one version is “Boston Marathon Explosion”. The e-mail contains links that could infect your computer. Clicking on the link opens up a compromised Web page that shows a series of videos of the attack site. There is an unloaded video at the bottom of the Web page that leads to the Red Exploit Kit, which exploits various vulnerabilities on the user’s computer. Once an exploit has been successful, the user sees a popup asking them to download a file at which time malware is downloaded.

Social Media is another avenue criminals use to solicit donations. According to various reports, a Twitter account was created soon after the explosions that resembled a legitimate Boston Marathon account. Allegedly, for every tweet received to the account a dollar would be donated to the Boston Marathon victims. Though the account was suspended by Twitter, it is likely others may use this same method to commit fraud. The FBI was made aware of at least 125 questionable domains registered within hours of the Boston Marathon Explosions. Though the intentions of the registrants are unknown, domains have emerged following other disasters for fraudulent purposes.

Individuals should be vigilant when using email and social networking Web sites following the Boston Marathon explosions. Based on previous disasters, cyber criminals may use this event as a means to further illegal activity to gain personally identifiable information (PII).

Individuals can limit exposure to cyber criminals by taking the following preventative actions when using email and social networking Web sites.
Messages may contain pictures, videos, and other attachments designed to infect your computer with malware. Do not agree to download software to view content.
Links appearing as legitimate sites (example: fbi.gov), could be hyperlinked to direct victims to another Web site when clicked. These sites may be designed to infect your computer with malware or solicit personal information. Do not follow a link to a Web site; go directly to the Web site by entering the legitimate site’s URL.

Individuals can also limit exposure to cyber criminals by taking the following preventative actions when receiving solicitations from, or donating to, charitable organizations online.
Verify the existence and legitimacy of organizations by conducting research and visiting official Web sites. Be skeptical of charity names similar to but not exactly the same as reputable charities.
Do not allow others to make the donation on your behalf. Donation-themed messages may also contain links to Web sites designed to solicit personal information, which is routed to a cyber criminal.
Make donations securely by using debit/credit card or write a check made out to the specific charity. Be skeptical of making donations via money transfer services as legitimate charities do not normally solicit donations using this method of payment.

If you believe you have been the victim of fraud by someone soliciting funds on behalf of disaster victims or want to report suspicious e-mail solicitations or fraudulent Web sites please file a complaint with the FBI’s Internet Crime Complaint Center at http://www.ic3.gov/

CFN - California Fire News 2013

No comments:

How fires get their names

Every year in California thousands of wildfires start throughout the state. In most cases, the dispatch center sending the initial resources to a wildland fire will designate a name for the fire, but the first on scene engine or fire official can also name the incident. Fires are usually named for the area in which they start – a geographical location, local landmark, street, lake, mountain, peak, etc. Quickly naming the fire provides responding fire resources with an additional locater, and allows fire officials to track and prioritize incidents by name. For example during the Southern California Fire Siege of 2003, the largest wildland fire in California history, the Cedar Fire in San Diego County, was named after the Cedar Creek Falls area where it started. The destructive Old Fire, which burned during the same time period in San Bernardino County, was named after the road along which it started - Old Waterman Canyon Road.

CAL FIRE is the largest fire department in California and the second largest fire department in the United States. CDF - CAL FIRE Firefighters answer the call more than 300,000 times a year. CAL FIRE Firefighters make up the fire department for 30 of our 58 counties in California and more than 100 local communities. We serve as the incident command during many of California’s most serious disasters. CAL FIRE Firefighters respond to many various types and forms of calls ranging from structural fires, to auto accidents, to earthquakes, to floods, to the spilling of hazardous materials, to every conceivable disaster; CAL FIRE answer's the calls. CAL FIRE is the largest fire department in California and the second largest fire department in the United States . CAL FIRE firefighters protect 33 million acres of State Responsibility Area (SRA). We have over 4,000 members within CAL FIRE and CAL FIRE is associated with the California Professional Firefighters (CPF) and the International Association of Firefighters (IAFF).

CFN - CALIFORNIA FIRE NEWS - CAL FIRE NEWS

Thursday, April 18, 2013