Fake FTC e-mails contain virus attack

Scammers spoof the FTC by sending an attachment to recipients that contains keylogging software

Scammers are sending out virus-laden e-mails claiming to have information on complaints filed with the U.S. Federal Trade Commission, the FTC warned Monday.

The e-mail appears to come from frauddep@ftc.gov -- a spoofed address -- and it includes a malicious attachment that downloads keylogging software, which is used to steal sensitive information such as passwords and account numbers.

"While the e-mail includes the FTC seal, it has grammatical errors, misspellings, and incorrect syntax," the FTC said in an alert, released Monday. "Recipients should forward the e-mail to spam@uce.gov and then delete it." E-mail sent to this uce.gov address goes into the FTC's spam database, which is used by investigators.

Online scammers often masquerade as government agencies such as the Internal Revenue Service in the hopes of tricking unsuspecting victims into clicking on attachments or visiting malicious Web sites.

Mobile Security Insider: iOS vs. Android vs. BlackBerry vs. Windows Phone
Recommended
Join the discussion
Be the first to comment on this article. Our Commenting Policies