Firms target of e-mail scams

November 23, 2009
Back to TopCommentsE-mailPrint
Law firms are being warned that they are the target of “spear phishing” e-mails. The FBI sent out an advisory last week which said that it believed hackers were targeting U.S. law firms and public relations firms.

The hackers are spear phishing – sending unwanted e-mails that appear to be from someone the recipient knows. Traditional phishing e-mails are usually easily identified because they are from names you don’t recognize, or even random characters strung together.

By doing this, it’s more likely for someone to open the message and then click on the links attached. Of course, we know it’s the links that are the dangerous part of phishing scams and the FBI says clicking on the link or opening the attachment will launch a self-executing file. That file, “through a variety of malicious processes,” will attempt to download another file, according to the advisory. The attachments aren’t always .exe files, which are typically some kind of software or program, but may appear to be zip files or photos.

The FBI doesn’t say what info the hackers are looking for or how badly a firm’s computer system and information could be compromised. In fact, there’s apparently no reliable way to know whether the incoming message is a scam.

The lesson for firms: if you are unsure of the e-mail, better safe than sorry in clicking on any links or opening attachments. Perhaps a phone call to the alleged sender would also help clear up any confusion.

Also, how much is too much information put on computer networks? With the push to reduce paperwork, information that was once housed in the firm is now potentially available to anyone with the means of hacking into the system. Law firms contain a mountain of personal information – both on employees and clients. Breaking into a firm’s data system could be a hacker’s dream.

Any firms here in Indiana receive these spear phishing e-mails? How often do you receive scam e-mails and how can you tell if they are real?
ADVERTISEMENT

Post a comment to this story

COMMENTS POLICY
We reserve the right to remove any post that we feel is obscene, profane, vulgar, racist, sexually explicit, abusive, or hateful.
 
You are legally responsible for what you post and your anonymity is not guaranteed.
 
Posts that insult, defame, threaten, harass or abuse other readers or people mentioned in Indiana Lawyer editorial content are also subject to removal. Please respect the privacy of individuals and refrain from posting personal information.
 
No solicitations, spamming or advertisements are allowed. Readers may post links to other informational websites that are relevant to the topic at hand, but please do not link to objectionable material.
 
We may remove messages that are unrelated to the topic, encourage illegal activity, use all capital letters or are unreadable.
 

Messages that are flagged by readers as objectionable will be reviewed and may or may not be removed. Please do not flag a post simply because you disagree with it.

Sponsored by
ADVERTISEMENT
ADVERTISEMENT