The Holidays Are Here & So Are The Scams!

US-CERT Alerts Users to Holiday Phishing Scams and Malware Campaigns

Original release date: November 25, 2015 | Last revised: November 27, 2015

US-CERT reminds users to remain vigilant when browsing or shopping online this holiday season. Ecards from unknown senders may contain malicious links. Fake advertisements or shipping notifications may deliver infected attachments. Spoofed email messages and fraudulent posts on social networking sites may request support for phony causes.

To avoid seasonal campaigns that could result in security breaches, identity theft, or financial loss, users are encouraged to take the following actions:

• Avoid following unsolicited links or downloading attachments from unknown sources.

• Refer to our security Tips to learn more about Shopping Safely Online and Avoiding Social Engineering and Phishing Attacks.

• Read the Federal Trade Commission’s blog on Cyber Monday shopping.

• Visit the Federal Trade Commission’s Consumer Information page on Charity Scams.

If you believe you are a victim of a holiday phishing scam or malware campaign, consider the following actions:

• File a complaint with the FBI’s Internet Crime Complaint Center (IC3).

• Report the attack to the police and file a report with the Federal Trade Commission.

• Contact your financial institution immediately and close any accounts that may have been compromised. Watch for any unexplainable charges to your account.

• Immediately change any passwords you might have revealed and do not use that password in the future. Avoid reusing passwords on multiple sites.

There’s no better time than the present (Get it? “PRESENT”?!) to ask us about our Managed Threat Mitigation Suite. With built-in Anti-virus and Anti-malware engines, as well as content filtering, application control, and search protection, threats like this will be a ghost of Christmas past!

Original Link: https://www.us-cert.gov/ncas/current-activity/2015/11/25/US-CERT-Alerts-Users-Holiday-Phishing-Scams-and-Malware-Campaigns