Your Daily Computer Security Tips

Criminals in the Ukraine launched a complex, well-organized scheme against Bulitt County, Kentucky just the other day. They ultimately stole about $415,000 from the county’s bank accounts, with the help of some 25 individuals in the U.S. These persons received unauthorized wire transfers from the county’s bank, and were then instructed to wire the money (less a commission) to the Ukraine.

The attack apparently relied on a keylogger Trojan, which somehow got onto the county’s computers. The Trojan created a direct connection between the infected Windows computer and the attackers. In this way, the hackers were able to log into the county’s bank account over its own Internet connection.

This is important, because together with some other email trickery, it made the bank think the remote attacker’s computer was newly authorized to access the county’s bank accounts and conduct business.

The important point for us in this cautionary tale of woe is those 25 accomplices. They were initially recruited to edit text and correct grammar (sound familiar?). Then they were gradually led into the illegal money transfer scheme. Many are out thousands of dollars, as their banks froze their accounts and demanded the return of the money transfers.

Do not, repeat not, open or read spam emails. What exactly is spam? Good question. It is simply email you were not expecting, or where you do not recognize the From address. Never click on links in a spam email. You could end up on a malicious site that will damage your computer.

Do not get involved in these kinds of deals requiring money transfers. If in doubt, show the email to your bank.