{"id":1621,"date":"2011-02-01T09:16:57","date_gmt":"2011-02-01T17:16:57","guid":{"rendered":"http:\/\/blog.cosaint.net\/?p=1621"},"modified":"2023-02-14T06:24:32","modified_gmt":"2023-02-14T06:24:32","slug":"even-if-you-expect-an-email-attachment-its-not-always-safe","status":"publish","type":"post","link":"https:\/\/www.empowerelearning.com\/blog\/even-if-you-expect-an-email-attachment-its-not-always-safe\/","title":{"rendered":"Even If You Expect An Email Attachment, It&#8217;s Not Always Safe"},"content":{"rendered":"<p><img decoding=\"async\" class=\"alignleft size-full wp-image-611\" title=\"email\" src=\"https:\/\/www.empowerbpo.com\/blog\/wp-content\/uploads\/2007\/01\/email1.gif\" alt=\"\" width=\"150\" height=\"150\" srcset=\"https:\/\/www.empowerelearning.com\/blog\/wp-content\/uploads\/2007\/01\/email1.gif 150w, https:\/\/www.empowerelearning.com\/blog\/wp-content\/uploads\/2007\/01\/email1-100x100.gif 100w\" sizes=\"(max-width: 150px) 100vw, 150px\" \/>The FBI recently issued a warning about malware included in email attachments responding to online job postings. They quote the case of a US business that lost more than $150,000 after an employee opened an attachment that had been sent in response to a job posting. Malware embedded in the attachment, a variant of the ZeuS\/Zbot Trojan, then allowed the attacker to obtain the credentials of the person who was authorized to conduct online banking financial transactions within the company.<\/p>\n<p><!--more--><\/p>\n<p>Simon Herring of <a href=\"http:\/\/ubersecure.com\/2011\/01\/mighty-zeus-and-your-bank-account\/\" target=\"_blank\" rel=\"noopener nofollow\">Ubersecure<\/a> writes:<\/p>\n<blockquote><p>The targets of these attacks are companies that have recently posted on job search sites. So what&#8217;s the connection? If you&#8217;ve posted a job opening, then it&#8217;s only logical that someone at the targeted business is expecting a resume or curriculum vitae (CV). They are, after all, trying to fill a vacant position. This means an email with an attached resume isn&#8217;t really &#8220;unsolicited email&#8221;, making it more likely to be opened by the recipient.<\/p><\/blockquote>\n<p>Over the past year or so, more and more attention has been placed on malware installation through social networks, shortened URLs, and other vectors. But email attachments continue to be a threat. So, it&#8217;s probably time to remind your staff that<\/p>\n<ol>\n<li>malware is still being passed around in email attachments;<\/li>\n<li>email scanners don&#8217;t always detect malware; and<\/li>\n<li>email attachments you might not consider to be &#8216;unsolicited&#8217; might still be infected.<\/li>\n<\/ol>\n<p><b>References:<\/b><\/p>\n<ul>\n<li><a href=\"http:\/\/www.ic3.gov\/media\/2011\/110119.aspx\" target=\"_blank\" rel=\"noopener nofollow\">E-mails Containing Malware Sent To Businesses Concerning Their Online Job Postings<\/a> (FBI &#8211; Jan 19, 2011)<\/li>\n<li><a href=\"http:\/\/www.ic3.gov\/media\/2010\/CorporateAccountTakeOver.pdf\" target=\"_blank\" rel=\"noopener nofollow\">Fraud Advisory for Businesses: Corporate Account Take Over<\/a> (United States Secret Service, the Federal Bureau of Investigation, the Internet Crime Complaint Center (IC3) and the Financial Services Information Sharing and Analysis Center (FS\u0081-ISAC))<\/li>\n<li><\/li>\n<\/ul>\n","protected":false},"excerpt":{"rendered":"<p>The FBI recently issued a warning about malware included in email attachments responding to online job postings. They quote the case of a US business that lost more than $150,000 after an employee opened an attachment that had been sent in response to a job posting. Malware embedded in the attachment, a variant of the [&hellip;]<\/p>\n","protected":false},"author":3,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[6],"tags":[],"class_list":["post-1621","post","type-post","status-publish","format-standard","hentry","category-infosec"],"_links":{"self":[{"href":"https:\/\/www.empowerelearning.com\/blog\/wp-json\/wp\/v2\/posts\/1621","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.empowerelearning.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.empowerelearning.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.empowerelearning.com\/blog\/wp-json\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/www.empowerelearning.com\/blog\/wp-json\/wp\/v2\/comments?post=1621"}],"version-history":[{"count":0,"href":"https:\/\/www.empowerelearning.com\/blog\/wp-json\/wp\/v2\/posts\/1621\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.empowerelearning.com\/blog\/wp-json\/wp\/v2\/media?parent=1621"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.empowerelearning.com\/blog\/wp-json\/wp\/v2\/categories?post=1621"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.empowerelearning.com\/blog\/wp-json\/wp\/v2\/tags?post=1621"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}