Here is an FBI warning that was sent out yesterday to all FBI agents and FBI Infragard members. It is worth repeating verbatim.
From: HQ INFORMATION TECHNOLOGY BRANCH
Sent: Sat Sep 11 22:08:33 2010
Subject: Computer Security Alert
A new Computer “worm” attacked several federal agencies and Fortune 500 companies yesterday. The malicious email messages contain the subject line “Here you have” or “Just For You” and contain a link to a seemingly legitimate PDF file. If users click on this link, they will be redirected to a malicious website that will prompt them to download and install a screensaver (.scr) file. If they agree to install this file, they will become infected with an email worm that will continue to propagate through their email contacts.
Even though we are protected, sometimes the adversaries change the email to look a little different so they can get past defenses. The Bureau is asking all users to carefully watch your emails here at work and on your home machine. To reduce the risk of compromising your FBI workstation, be alert for unsolicited e-mail messages and keep in mind the following traits common to malicious e-mail messages:
- Subject matter related to recipient’s work, possibly containing actual U.S. Government information
- A sense of urgency to convince the recipient to open an attachment or click a link within the message
- Convincing content such as upcoming meeting agendas, reports, information on current events or policy issues
- Seemingly-legitimate sender (government and commercial addresses, including @fbi.gov) using legitimate signature and contact information
- Receiving an email with just a link
- An attachment (typically a .pdf or .zip file) or link
Thank you for your assistance and vigilance in protecting the FBI’s networks.
Enterprise Security Operations Center (ESOC)
JEH-HQ