Spear phishing attacks savvy computer users

WASHINGTON (8/30/05)--Computer hackers are continually creating new ways to scam personal information out of even the most computer-savvy people (Silicon.com Aug. 12).

The Wall Street Journal recently reported a new wave of more sophisticated phishing attacks, dubbed "spear phishing." Most computer users have become familiar with phishing, where hackers send phony e-mails--often purportedly from financial institutions--that ask for personal information.

The more sophisticated attacks--spear phishing--are targeted at specific companies and government agencies. The crime involves phony e-mail messages designed to look like they're from the recipient's company or organization--often from an information-technology or human-resources department.

Another technique used by thieves involves tricking people into faxing their personal information. The new technique sends phony e-mails that ask people to fax sensitive information to bogus security investigators.

To avoid becoming a victim, install a firewall, update antivirus and antispyware programs, make sure your browser has updated security patches, never use e-links within e-mail messages, and never give personal information in response to urgent e-mails. Review your statements carefully, and remember that your credit union never will contact you to request personal information.

Resource Links

Statement stuffer: Phishing: Don’t Take the Bait

Resources to fight phishing fraud