US security agency issues serious fraud alerts

The Internet Crime Complaint Center has issued two fraud alerts warning of attacks targeting enterprises and individual users.

The Fraud Advisory for Businesses (PDF) said that the attacks range from malware-laden emails and phishing attempts, to social engineering scams that attempt to trick people into handing over account information.

"First identified in 2006, this 'corporate account takeover' fraud has morphed in terms of the types of companies targeted and the technologies and techniques employed by cyber criminals," reads the alert.

"Where cyber criminals once attacked mostly large corporations, they have now begun to target municipalities, smaller businesses and non-profit organisations. "

The Fraud Advisory for Consumers (PDF), meanwhile, warns of criminal operations disguised as 'work from home' job opportunities. Cyber criminals often use such postings to recruit people for 'money mule' operations.

Victims are asked to receive payments from compromised accounts into their own bank accounts, and then send the funds overseas via wire transfer.

In the process, the stolen money is 'laundered' through the user's account and securely transferred to criminal groups.

A group of money mules and the individuals who manage such operations were the recent target of a series of arrests in the US and Europe in connection with the Zeus malware.

The security alert warns people to avoid suspicious job postings, particularly those that ask for bank account information or a fee prior to employment.