Dun & Bradstreet Reports Phishing Email Scam

Did you receive a customer complaint email from Dun & Bradstreet recently? It may be a phishing scam. According to a recent release on the D&B website, a spammer sent out a large number of emails purporting to come from D&B (alert@dnb.com) alleging that a complaint requiring prompt action had been made against the recipient. Like many phishing scams, the email looks real. In this case, the scammer used the Dun & Bradstreet Credibility Corp. logo and even the correct contact information.

Dun & Bradstreet, is working hard to identify the spammer and recommends contacting D&B (866-584-0283) if you ever doubt the origin or content of a D&B email.

For any email that you suspect may be a phishing scam:

• Do NOT click on any links or attachments.
• Read the email carefully for signs that it may be fake (for example, misspellings, grammar, generic greetings such as “Dear member” instead of a name, etc.).
• Be wary of any urgent instructions to take specified action such as “Click on the link or your account will be closed.”
• Hover your mouse over links without clicking to see if the address is truly from the sender. The URL in the text should match the URL that your mouse detects. If the two do not match, it is most likely a scam.
• Delete the email from your computer completely (be sure to empty your “trash can” or “recycling bin,” as well).
• Run anti-virus software updates frequently and do a full system scan.
• Keep a close eye on your bank statements for any unexpected or unexplained transactions.

Read the full alert, here. 

Fake Scanner Emails Infect Office Computers

You are at work, and you receive a message from what you think is your office printer/scanner. It appears that someone sent you a copy of a scanned document.  The name doesn't ring a bell, but you open the attachment anyway.

When you click on the file, you find that it isn't a scanned copy of the latest office report. It’s really a link to a third-party website that will download a virus to your computer.  These viruses phish for personal and banking information on your machine. 

The settings in the email header have been faked, so the messages appear to come from an internal email address. However, with so many workplaces failing to set strong passwords, it is possible that your scanner was hacked.

As always, variations of the scam exist. Most recently, scammers have disguised malware as emails from Hewlett-Packer and Xerox scanners. But scammers will hijack any famous manufacturer’s name to lend credibility to their scam.

NOTE: Hewlett-Packard, IBM and Microsoft are BBB Accredited Businesses. Hewlett-Packard is also a BBB National Partner.

How Do I Protect My Work Computer From Viruses: 

While your work computer is not your personal property, downloading a virus is great way to ruin your work day. Here are tips for protecting your office computer:

• Create strong passwords. Don’t leave the factory presets or use easy to crack passwords. See Microsoft’s tips for creating strong passwords.
• Don’t believe what you see. Scammers can make emails appear to come from an account at your office. Just because it’s an “@yourbusiness.com” address does not mean it’s safe.
• Be wary of unexpected emails that contain links or attachments. Do not click on the links or open the files.
• Beware of pop-ups. Some pop-ups are designed to look like they’ve originated from your computer. If you see a pop-up that looks like an anti-virus software but warns of a problem that needs to be fixed with an extreme level of urgency, it may be a scam.
• Keep anti-spyware, anti-virus and anti-spam software up to date.  Your office’s IT department probably has your computer programmed to conduct regular scans and updates. Let these run as planned.

Have you received an email like this?

Businesses: Don't Fall for Fake 'BBB' Emails

How Fake FTC Emails are Tricking Business Owners

A new phishing scam is making the rounds disguised as a consumer complaint notification from the FTC. If you receive it, just hit "delete."  

How the Scam Works:

You get an email that appears to be from the FTC with the subject line: "Notification of a Consumer Complaint." (Sample email below) The email states that a complaint has been filed against your business, and you need to review and respond to the allegations. 

The email provides a link for you to supposedly click through to the FTC website and download a PDF of the complaint details. The link really goes to a third party website, and the file you download is actually malware that scans your computer for personal and banking information.

Like most scams, this one is not set in stone. Several variations already exist, and scammers will continue to alter the emails as news of the con spreads. Watch out for changes in the subject line and the complaint details. Older reports of the scam involve emails that urge recipients to call a fake FTC help hotline or complete an online complaint form.  

How to Spot a Phishing Email:  

• Don't believe what you see. Scammers can make links look like they lead to legitimate websites (as in the example above) and emails appear to come from a different sender. It's also easy to steal the colors, logos and email header of the FTC or any other established organization.
• Be wary of unexpected emails that contain links or attachments.Do not click on the links or open the files.
• Check a link's true destination by hovering over it and looking in the lower right hand corner of your browser.
• Try Googling the organization or the contents of the email. If the email is a scam, this is likely to reveal an alert or bring you to the organization's real website, where they may have posted further information.

For More Information  
Check out the Federal Trade Commission's official warning about the scam.
 
To find out more about scams, check out BBB Scam Stopper.

New Twist on the BBB Phishing Email Scam... Again!

BBB has been the victim of a phishing scam for over a year. Scammers have just launched a campaign involving supposed BBB complaints. The emails carry an attached “complaint form” that is actually a virus! Many were emailed yesterday and demand a response by January 23rd. The emails purport to come from the Chicago BBB.

If you have received this, or any other suspicious emails from someone claiming to be from the BBB, please forward them to phishing@council.bbb.org to help us shut down the scammers as quickly as possible. Do not click on any links or download attachments.

For more on the BBB phishing scam, go to bbb.org.

Beware of the BBB Phishing Email

The BBB reports another scam using the BBB name has popped up again, and has been received by consumers and businesses from our own BBB office including other areas across the U.S. and Canada. They are really good fakes – they use correct grammar and follow formats often used by BBB, so they look quite realistic. Businesses and consumers are advised not to click!

Two versions of the email have been received. One claims to be following up on a complaint filed with BBB, the other is asking for updated contact information “as a service to BBB Accredited Businesses.”

Both refer the recipient to an online form, and the address appears to be that of a local BBB. However, if you hover your mouse over the web address (the part that begins with http), you can see that the real address is not from BBB at all. DO NOT CLICK ON THE LINK! The link actually takes you to a rogue website that downloads a Trojan virus on your computer.

The bottom line is this: If you don’t own a business, you can disregard any BBB email that claims your company has been the subject of a customer communication. If you do own a business, you can always check with your local office to confirm the legitimacy of any email purporting to come from BBB.

Another BBB Phishing Scam. Don’t Bite!

Phishing scams look like legitimate email, and they are getting more sophisticated every day. What these con artists are really after is your banking and financial information. And they won’t mind destroying your computer to get it.

Once again, scammers are sending emails that appear to come from your trusted Better Business Bureau. They’ll tell you that a complaint has been registered against your business, or that a customer has submitted a review of your business. (It doesn’t matter that you might not even OWN a business.)

The email will ask you to download and complete an attached form, or it will ask you to click on a link to view and respond to the consumer posting. Don’t do either!

The “attached form” is actually an executable file that will drop a nasty virus onto your system. Next thing you know, you’ll see a pop-up message that claims your computer is infected with dozens of viruses, and that will offer to clean your system for a fee. If you provide your credit card or banking information to have your system cleaned, you will waste your money, and the scammers will then have access to your funds and will steal even more of your money.

The links in the bogus email are dangerous, as well. They look like a link to a BBB page, but the code behind the link will actually route your browser to a website where malware is dropped onto your computer. The malware is written in such a way that it usually passes by anti-virus programs undetected. Once the malware is in place, the scammer can sniff for your banking information (including user names and passwords), and can use your system to send more scam emails out to your contacts under your name.

The bottom line is this: If you don’t own a business, you can disregard any BBB email that claims your company has been the subject of a customer communication. If you do own a business, you can always check with your local office to confirm the legitimacy of any email purporting to come from BBB. To find your local office, visit www.bbb.org/find. But never click on a link in an email or download an attachment unless and until you confirm that it truly came from BBB.

BBB would like you to send us any bogus emails claiming to come from BBB. Forward the email(s) to phishing@council.bbb.org. Don’t worry if you receive a notification that the email could not be delivered because of an attached virus. We pull them from quarantine and examine them anyway. Please understand that we would like to reply to each email, however, when the traffic to the phishing mailbox is particularly heavy, we might not be able to offer a direct reply. If you need personal assistance with an email, contact your local BBB.