ANOTHER FDIC - THEMED EMAIL SPAM CAMPAIGN
There is a revised FDIC-themed email spam campaign being waged to take advantage of the trust people have in the FDIC name. There are several versions of this email – all containing the same elements and purpose – to steal your private personal information.
In the latest version the subject line reads; “FDIC notification.” The headers are spoofed to appear as the email does in fact originate from the FDIC return email address – no.reply@fdic.gov.
As with most of the previous FDIC spam emails, the body of the message contains mistakes. These mistakes should serve as an indication the email did not originate from a government agency.
The body of the email reads:
"Your account ACH and WIRE transaction have been temporarily suspended for security reasons due to the expiration of your security version.
"To download and install the newest installations read the document (pdf) attached below. As soon as it is setup, you transaction abilities will be fully restored."
The attachment is called FDIC_document.zip and contains an executable file named the same. The file has a PDF icon since Windows 7 does not display known file extensions, it could easily trick users. Recipients should not click on the link provided. The file is actually a computer Trojan that serves as a distribution platform for other malware. This means that running it will most likely lead to multiple infections.
Users are strongly advised to always treat email attachments with suspicion. When in doubt about the legitimacy of an email it is always best to check with the corresponding organization over the phone.
The FDIC does not issue unsolicited e-mails to consumers or business account holders.
You should delete this email and all other suspicious emails from your inbox and your deleted folder or trash bin.
There have been a number of fraudulent emails purporting to be from the FDIC. Please refer to the previous alert – “FDIC Officials Continue to be Target of Spam Email” and “FDIC Scam” – for additional details.
If you think you have been a victim of the scam, call your financial institution and file a complaint with the FBI’s Internet Crime Complaint Center: http://www.spiritbank.com/leavepage.html?url=http://www.ic3.gov/complaint/default.aspx .