December 3, 2009CDC H1N1 “Swine Flu” - PHISHING SCAM
Centers for Disease Control and Prevention This is an official
CDC HAN Info Service Message
Distributed via Health Alert Network
December 2, 2009, 13:51 EST (01:51 PM EST)
CDC H1N1 “Swine Flu” - PHISHING SCAM
Summary: The Office of the Chief Information Security Officer (OCISO) at the CDC, with the Cyber Security Incident Response Team (CSIRT) have received reports of fraudulent emails (phishing) referencing a CDC sponsored State Vaccination Program for the H1N1 “Swine Flu” contagion. CDC has NOT implemented a state vaccination program requiring registration on www.cdc.gov. Users that click on the embedded link in the email are at risk of having malicious code installed on their system. OCISO would like to remind users to take the following steps to reduce the risk of being a victim of a phishing attack:
1. Do not follow unsolicited links and do not open or respond to unsolicited email messages.
2. Use caution when visiting un-trusted websites.
3. Use caution when entering personal information online.
For an example of a phishing email, please see our website on Health Related Hoaxes and Rumors at http://www.cdc.gov/hoaxes_rumors.html
The Centers for Disease Control and Prevention (CDC) protects people’s health
and safety by preventing and controlling diseases and injuries; enhances health decisions
by providing credible information on critical health issues;
and promotes healthy living through strong partnerships with local,
national and international organizations.
DEPARTMENT OF HEALTH AND HUMAN SERVICES