Fake Subpoenas Sent To CEOs For Social Engineering

An anonymous reader writes "The Internet Storm Center notes that emails that look like subpoenas are being sent out to the CEOs of major US corporations. The email tries to entice the victim to click on a link for 'more information.' According to the ISC's John Bambenek: 'We've gotten a few reports that some CEOs have received what purports to be a federal subpoena via email ordering their testimony in a case. It then asks them to click a link and download the case history and associated information. One problem, it's [totally] bogus. It's a "click-the-link-for-malware" typical spammer stunt. So, first and foremost, don't click on such links. An interesting component of this scam was that it did properly identify the CEO and send it to his email directly. It's very highly targeted that way.'"

Comments

To be on the safe side ...

[cpricejones]

maybe they should post the email list so that all the CEOs out there know if that particular subpoena they received was real or not. So many subpoena emails to go through ...

Re:Boss got this yesterday

[Anonymous Coward]

Is there some "hacker code" out there that says if you are sending out a phishing email - you must misspell at least a few words?

We're really not supposed to talk about the hacker code in public, where n00bs might see.

Re:Hmmm....

[Anonymous Coward]

I've been using bill@microsoft.com as my email address for websites for years.
I hope he appreciates the extra business i'm sending his way.

Re:Boss got this yesterday

[tattood]

The first rule of hacker code is - you don't talk about hacker code.

Re:You already have real problems.

[cynicsreport]

So, first and foremost, don't click on such links.

This is always good advice. For more information on how to avoid anonymous links, check out this website.

Etch a Sketch

[EEPROMS]

We just gave our CEO a new laptop, that reminds me I better tell him he needs to shake it to reset.

Re:You already have real problems.

[Lobster Quadrille]

I clicked it. It just says 'server not found'.

If you're going to make a joke on slashdot, you gotta at least register the domain and build a website, or nobody will take you seriously.

How will he click it?

[prockcore]

How will the CEO click the link on the printout his secretary made for him?

Re:Subpoena by *email* ??

[GoodbyeBlueSky1]

This sounds like baloney. Can you back this up with a link?

Re:You already have real problems.

[Urza9814]

c'mon man! If you're gonna make a link, make it to a real website! As a Linux user, I enjoy visiting malware sites :)

Re:You already have real problems.

[Lobster Quadrille]

Good thing I used my CEO's computer to view it.

Re:You already have real problems.

[GreyWolf3000]

He did. It's just that the link got slashdotted.

That's nothing

[PCM2]

You think that's targeted? The other day I received an e-mail from a pharmaceutical company offering to discuss options for enlarging my very small penis. They asked me if I was tired of being unable to satisfy women, and whether I had tried the other pills without results. I mean, seriously ... how can spammers find out stuff like this?? I'm switching to Firefox.

Re:You already have real problems.

[matt me]

If you're going to make a joke on slashdot, you gotta at least register the domain and build a website, or nobody will take you seriously. I have not registered the domain and built a page there. The page appears identical to the firefox error page.