Fake DHS Intel E-mails Spread Malicious Software

WASHINGTON — Some e-mails purporting to be from the Homeland Security Department's intelligence division were fake and contained malicious software.

The e-mails actually originated from Internet addresses in Latvia and Russia, according to a three-page alert from the Homeland Security Department's counterintelligence unit. The document was obtained by The Associated Press.

These fake e-mails were sent to officials in the Defense Department and to state and local officials since June. The spyware appears to be criminal, according to the alert. But counterintelligence officials "cannot discount that targeting of DHS partners and DoD personnel may be for other purposes."

The e-mails were made to look as if they had actual text from a department intelligence assessment. They included links embedded with spyware known for stealing banking data and protected passwords.

Homeland Security spokeswoman Amy Kudwa said anyone who receives an e-mail like this should not open the link and should report the e-mail to their technology departments.

Comments

[twodox]

06:29 PM on 08/24/2009

Here is the DHS news release page:
http://www.dhs.gov/ynews/releases/

Nothing about any cyber attack. I think you've been pwned.

[Josie Gates]

06:00 PM on 08/24/2009

they will never stop pursuing people who will speak up. This whole DHS thing is so much more than a can of worms, its a cess pool full of bodies, that those who profited from would like to keep hidden. google the name of Jason NG/nina bernstein to know how it works...

I dont know who is behind this email scam, or the purpose, most likely just the usual theft for profit....it prob has nothing to do with the actual 'business' of DHS......

like cindy sheehan, who found an 'employee' fixing hr phone in the hotel, I keep the cell phone in the fridge now and then.

google my name joseen howarth-gates

[Whinger]

05:46 PM on 08/24/2009

Beware of geeks bearing gifts!

[not going2take it]

02:52 PM on 08/24/2009

*Instant KARMA is gonna get you*
*Instant karma is gonna knock you right off your feet*

[WasteNJ]

02:49 PM on 08/24/2009

Only takes a few people clicking on them to let the root-kits or worms out. Then they will sit and wait for further instructions. Spoofing email is the easiest way to hack somebody from the inside.

[twodox]

02:36 PM on 08/24/2009

Are you sure that this announcement isn't a hoax? I cannot find any mention of it on the DHS web page, which now is non-responsive (perhaps in response to this "announcement,")

The only place I can find it is here,
http://www.nationalterroralert.com/updates/2009/08/24/warning-on-fake-homeland-security-department-intel-e-mails/

I do not know who "National Terror Alert" is, but they are not a government agency.

[Playin Possum]

01:41 PM on 08/24/2009

HA HA HA!!!

[kd1s]

01:31 PM on 08/24/2009

Anyone who is even remotely savvy about computers knows that whenever you get an email that even looks at the headers.

That last received line - that tells you where the message came from originally.

Then go to arin.net (American registrar) and plug the address in. Sometimes it'll tell you it's registered on ripe.net, or apnic.net. The former being the European address registrar, the latter being the Asia-Pacific registrar.

Some smart phishers and scammers have taken to masking the originating receive line. Those automatically get dumped into the bit bucket.

[Grunty1]

01:31 PM on 08/24/2009

Are we sure that they are fake? It surely sounds like something that a Bush created department would do.

[larry278]

01:47 PM on 08/24/2009

Anything that W & his cohorts in crime ever tried, or did, now do, or ever might do must be defined & said to be fake. That will be among the findings of any investigation, grand jury, trial & all appeals of guilty verdicts re: W, et al. W, et al, are 100% ersatz blended with 3d rate shoddy.
It's am-ft for the full investigations to begin, Pres Obama.