| “This spam email attack is designed to play on the subject at the forefront of users minds – their password security. Falling for this scam could lead to the unsuspecting user becoming part of a botnet. With the recent hack of Web email accounts, users would feel more compelled to open an attachment that purports to hold their new password, as they’d be worried who changed it in the first place. Websense reported on the ’add a friend’ Facebook scams back in November 2008 so this new campaign shows how cyber criminals adapt their scams to take advantage of the latest hot topic. Our advice for users is always go directly to the Web address you have an account with and reset passwords there.” Carl Leonard, Websense Security Labs Manager. |