Advisory: FBI Warns of Fake Govt Sites

Krebs on Security posted a reminder of recent FBI announcements:

The Federal Bureau of Investigation (FBI) is warning that individuals sympathetic to the Islamic State of Iraq and al-Shams (ISIS) are mass-defacing Websites using known vulnerabilities in WordPress. The FBI also issued an alert advising that criminals are hosting fraudulent government Web sites in a bid to collect personal and financial information from unwitting Web searchers.

http://www.ic3.gov/media/2015/150407-2.aspx

The FBI advice regarding the fake government sites is good practice for engaging in transactions on the internet - research and review before contacting online services:

Below are some consumer tips when using government services or contacting agencies online:

• Use search engines or other websites to research the advertised services or person/company you plan to deal with.
• Search the Internet for any negative feedback or reviews on the government services company, their Web site, their e-mail addresses, telephone numbers, or other searchable identifiers.
• Research the company policies before completing a transaction.
• Be cautious when surfing the Internet or responding to advertisements and special offers.
• Be cautious when dealing with persons/companies from outside the country.
• Maintain records for all online transactions.

As a consumer, if you suspect you are a victim of an Internet-related crime, you may file a complaint with the FBI’s Internet Crime Complaint Center atwww.IC3.gov.

Also mentioned - hacked sites taking advantage of out-of-date Wordpress installations:

http://www.ic3.gov/media/2015/150407-1.aspx