Spear-Phishing Attack Uses Fake Subpoenas To Steal From CEOs

Wow, these hackers are catching quite a few whoppers.

 

Keeping a system patched may be more important than using a firewall or running with limited rights. Of course, doing all three is better still.

 

Re: CEO subpoena scam fires up anew

I think that is actually quite funny. I don't respond to every email that I get from a known valid source! Suckers!

It reminds me of the grocery store chain that almost got scammed out of $10M on the basis of an email.

 

Does anyone know which one it is?

 

Not anyone with White List protection. Unfortunately, blocking executables by White Listing is deemed too restrictive in many corporate environments, as reported to me by several at sans.org when I inquired.

Since one exploit involved downloading a CAB file with an executable, Acrobat.exe, inside, basic user education should include that documents as specified in this attack would not be executable files. However, since it is easy to spoof an executable with a different file extension, even this rule of thumb is not reliable.

The only reliable security against this type of attack is for a company to get serious about securing company computers against such an attack, as the Los Angles Police Department has done,

----
rich