Broadband Tech > Security > Scam and Phishbusters > [Phish] email from CDC "personal vaccination profile"

reply to Dennis

Re: [Phish] email from CDC "personal vaccination profile"

reply to Dennis
This is another example of the need for real time Global BGP blocking and blackholing.

quote:

---

The data identified by the following URLs was then requested from the remote web server(s):

>http://193.104.41.75/cbd/75.bro
>http://193.104.41.75/kissme/rec.php
>http://promed-net.com/css/absderce2.exe
>http://193.104.41.75/ip.php
===============================

---

reply to Dennis
I sent an email to the CDC yesterday morning informing them of the scam and got back the following:

From: CDC-INFO [CDCINFO@cdc.gov]
Subject: RE: Email from CDC spreading viruses (computer)

Thank you for your inquiry to CDC-INFO. In response to your request for information on an e-mail you received claiming to be from CDC asking you to complete an online profile, please see the following information.

Do not fill out or provide any information as requested in the e-mail you received.

There are certain things that a true CDC representative will NEVER ask you for. CDC will NEVER ask for a Social Security Number, bank account information or credit card information. CDC also does not share personal information about another person at any time. If someone has asked you for any of this information, or shared information about another person with you, that person was not a representative of CDC.

If you feel that the information you provided may be used for identity theft, please contact the following agencies:

- the "identity theft" sections of the police department and the state attorney general's office;

- if you have given your social security number, contact the credit reporting bureaus (Equifax, TransUnion, Experian) identity theft sections;

- there is an identity theft link on the FirstGov website that will tell you what steps to take.

Identity Theft Resources

FirstGov
»www.consumer.gov/idtheft/index.html

Thank you for bringing this to our attention.

Thank you for contacting CDC-INFO Contact Center. Please do not hesitate to call 1-800-CDC-INFO, e-mail cdcinfo@cdc.gov or visit »www.cdc.gov if you have any additional questions.

CDC-INFO is a service of the Centers for Disease Control and Prevention (CDC) and the Agency for Toxic Substances and Disease Registry (ATSDR). This service is provided by Vangent, Inc. under contract to CDC and ATSDR.

The CDC is noting this on their site now...

»www.flu.gov/myths/index.html

quote:

---

Flu Myths and Realities

"The U.S. Centers for Disease Control and Prevention (CDC) is sending e-mails about a governmental registration program on the H1N1 vaccination"

These e-mails are not from the CDC – they are fraudulent emails referencing a CDC-sponsored Vaccination Program. they are spam e-mails designed by computer hackers to spread a computer virus.

The messages request that users must create a personal H1N1 (swine flu) Vaccination Profile on the cdc.gov website. The message then states that anyone that has reached the age of 18 has to have his/her personal Vaccination Profile on the cdc.gov site.

The CDC has NOT implemented a state vaccination program requiring registration on www.cdc.gov. Users that click on the email are at risk of having malicious code installed on their system. CDC reminds users to take the following steps to reduce the risk of being a victim of a phishing attack:

Do not follow unsolicited links and do not open or respond to unsolicited email messages.
Use caution when visiting un-trusted websites.
Use caution when entering personal information online.

---

reply to Dennis
Also on Computerworld:

Botnet continues massive H1N1 malware campaign

»www.computerworld.com/s/article/···campaign

At its peak, the fake CDC messages were hitting mailservers at the rate of 18,000 messages per minute, according to Florida based email security firm AppRiver.
--
"The trouble with computers, of course, is that they are very sophisticated idiots." - Doctor Who (from Robot)

reply to Dennis
Saw something in the paper this morning about this....