[ale] Red Cross Fraud

[Transam]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

This is to let y'all know that I received my first criminally fraudulent
spam email attempting to take advantage of people wanting to help victims
of the terrorist attacks in New York City and Washington, DC.

The email supplied URLs claiming to be the American Red Cross, "New
York Blood Center", United Way, and Salvation Army.  HOWEVER, the URLs
are NOT -- repeat -- NOT the URLs of these associations.  No doubt,
they are that of a thief.  Note that the phone number of the American
Red Cross is correct so this could trick someone into believing that
the URL of the web site is correct too.

The thief may assume that the phone lines will be busy.

All of the URLs in the fraud that *I* received looked like

   official_sounding_name.ym0.X, where X was  "net".

You may receive different fraud with different URLs.

Protect yourself!  Start with a trusted URL, such as cnn.com.

I've notified the FBI and others but they probably are real busy just now.

Best regards,

Bob Toxen
book at cavu.com
http://www.realworldlinuxsecurity.com/ [My 5* book: Real World Linux Security]
http://www.cavu.com/                   [Linux and UNIX Consulting]

Fly-By-Day Consulting, Inc.      "Don't go with a fly-by-night outfit!"
Quality Linux & UNIX security and software consulting since 1990.

GPG Public key available at http://www.realworldlinuxsecurity.com/pubkey.txt
  and at http://pgp5.ai.mit.edu/pks-commands.html#extract
pub  1024D/E3A1C540 2000-06-21 Bob Toxen <book at cavu.com>
     Key fingerprint = 30BA AA0A 31DD B68B 47C9  601E 96D3 533D E3A1 C540
sub  2048g/03FFCCB9 2000-06-21
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.6 (GNU/Linux)
Comment: For info see http://www.gnupg.org

iD8DBQE7pA6xltNTPeOhxUARAv8XAJwPMJexuz/DNU7jOt1q2xkTGS1FsgCdEHT7
2/nNKMPfg+3jVBqp72p6Wwc=
=eSOd
-----END PGP SIGNATURE-----
--
To unsubscribe: mail majordomo at ale.org with "unsubscribe ale" in message body.