Archive for November, 2008

“Obama acceptance speech” spam

Tuesday, November 11th, 2008

If you haven’t seen President-elect Barack Obama’s acceptance speech yet but are still interested, find it on the Internet from a reliable source. But whatever you do, don’t fall for the spam flooding inboxes everywhere. Click on the link for an Adobe Flash Player update, and what you’ll really get is malware carrying a Trojan horse that’s going to steal your data, according to an article that ran Friday on WashingtonPost.com.

Besides the message offering a chance to hear the acceptance speech, there are others with subject lines “election results winner” and “the new president’s cabinet?” and “fear of a black president.”

Clinking on the link sends the recipients to an official-looking site, where they’ll be asked to download “adobe_flash9.exe”. Don’t do it–that’s the Trojan horse. (more…)

Personal, financial information remains on most second-hand computers

Monday, November 10th, 2008

Most identity theft victims will never know how it happened. The results of the “the analysis of information remaining on disks offered for sale on the second-had market” study might provide some insight, if not comfort.

To put it briefly, what this international study found was that 2 out of 3 second-hand computers are sold with data remaining on their hard drives. As is that weren’t alarming enough, that’s a significant decline from last year’s finding that 45 of all computers examined were wiped clean before being sold. (more…)

Extortionists threaten to disclose Express Scripts’ customers’ information if ransom isn’t paid

Friday, November 7th, 2008

Express Scripts has gone public today with information that they were contacted early in October by extortionists who threatened to disclose personal and medical information on millions of the company’s customers if Express Scripts doesn’t meet their ransom demands.

The ransom request was sent by mail and accompanied by the names, birth dates, Social Security numbers and, in some cases, prescription details, of 75 of the firm’s 50 million customers.

George Paz, Express Scripts’ chief executive, said the company will not pay the ransom, but declined to say how much money the extortionists demanded. (more…)

Who’s at risk of identity theft?

Thursday, November 6th, 2008

Much of the information that makes up the outline of our personal histories exists digitally. We have records, medical charts, college transcripts, military records, county clerk’s files, credit scores, and personnel records. And we’re learning the hard way that we can’t necessarily trust the accidental archivists with our information. (more…)

Denver identity theft crime ring indicted

Wednesday, November 5th, 2008

A Denver grand jury indicted five defendants last week in an identity theft crime ring. Shadwick Weaver, the ringleader, is in custody and being held on $500,000 bond. Weaver has been indicted on 65 counts. Three of the others indicted by the grand jury are also in custody; a fifth defendant is at large.

During a joint investigation by the economic crimes units of the Aurora Police Department and the Denver District Attorney’s office, detectives discovered almost 300 fraudulent IDs, employee IDs, and counterfeit checks and credit cards. (more…)

Another school data breach; another reason to use LifeLock

Tuesday, November 4th, 2008

There’s been yet another data breach in yet another public school district. This most recent security lapse revealed the personal information of approximately 5,000 employees of the Seattle School District in Seattle, WA.

The information was accidentally given to the local unions that represent many of the district’s employees, including those whose information was exposed. The 5,000 workers involved make up more than half of the school district’s total employees. (more…)

Massive digital cache of stolen accounts, logins and passwords discovered. We all need LifeLock’s ID theft protection.

Monday, November 3rd, 2008

The RSA FraudAction Research Lab announced on Friday it had discovered a digital cache of more than a half million stolen online bank logins, passwords and credit card account numbers, and speculated that a Russian identity theft ring stole the information.

A computer virus called the Sinowal Trojan Horse is to blame for the massive theft, and has been collecting the data since 2006. (more…)