Alert for malicious code circulating via e-mail messages that appears to originate from the Social Security
Administration. These messages indicate that the recipient’s annual Social Security statement many contain errors. Users are instructed to follow a link to review their statement. This link redirects users to a seemingly legitimate website that requests the user’s Social Security number.

After the legitimate Social Security number is harvested, users will be given the option to generate an official statement of this transaction. This statement will attempt to install malicious code on the victim’s system in order to collect online banking information. This information can then be used to remotely access the victim’s bank account in conjunction with the Social Security provided.

Phishing attacks continue to present a serious threat to our networks. Users should never open unsolicited e-mail’s, links or attachments.

Our thanks once again to BrianG for this important tip.