The Federal Trade Commission routinely warns consumers and businesses about online fraud. They're doing so again -- but this time the scam artists are using the FTC's good name in an email spyware gambit. According to a statement from the FTC this morning, consumers, including corporate and banking executives, appear to be targets of a bogus e-mail supposedly sent by the Federal Trade Commission but actually sent by third parties hoping to install spyware on computers. The bogus e-mail poses as an acknowledgment of a complaint filed by the recipient, and includes an attachment. Consumers who open the attachment to this e-mail unleash malicious spyware onto their computer. The agency warns consumers who get this e-mail that purports to be from the FTC:
- Don’t open the attachment.
- Delete the e-mail.
- Empty the deleted items folder.
According to the FTC, the hoax e-mail is personalized, and contains the name of the recipient and their business. The bogus message explains how the complaint will be used, who will have access to it and states, “Attached you will find a copy of your complaint. Please print a hard copy of the complaint for your records in the upcoming investigation.” Opening the attachment downloads the malicious spyware.
Emails touting spyware offers is one of the most common forms of online fraud out there. What makes this particular campaign perilous is the fact that the perpetrators are using an official U.S. government agency, it's logo and letterhead, and email address. I don't have any actual studies on this, but my get tells me that consumers respond more aggressively to directives bearing Uncle Sam's imprint.
So the watch word here is "caution". Don't go for the FTC gambit and don't open any email offering spyware offers with the FTC's name on it.
Consumers can learn more about protecting themselves from malicious spyware and bogus e-mails at OnGuardOnline.gov, a Web site created by the FTC in partnership with other federal agencies and the technology industry to help consumers stay safe online. The site features modules on spyware and phishing, at http://onguardonline.gov/spyware.html and http://onguardonline.gov/phishing.html