Advisory: Potential Hurricane Harvey Phishing Scams

Reminder from US-CERT that recent disasters will lead to scam "fund-raising" emails.


National Cyber Awareness System:

Hurricane-Related Scams

09/08/2017 01:56 PM EDT

Original release date: September 08, 2017
As the peak of the 2017 hurricane season approaches, US-CERT warns users to be watchful for various malicious cyber activity targeting both disaster victims and potential donors. Users should exercise caution when handling emails that relate to recent hurricanes, even if those emails appear to originate from trusted sources. Disaster-related phishing emails may trick users into sharing sensitive information. Such emails could also contain links or attachments directing users to malware-infected websites. In addition, users should be wary of social media pleas, calls, texts, or door-to-door solicitations relating to the recent hurricanes.
To avoid becoming a victim of fraudulent activity, users and administrators should consider taking the following preventive measures:

• Review the information from the Federal Trade Commission (FTC) on Wise Giving in the Wake of Hurricane Harvey.
• Review information from the Federal Bureau of Investigation on Building a Digital Defense Against Charity Fraud.
• Use caution when opening email attachments, and do not click on links in unsolicited email messages. Refer to the US-CERT Security Tip Using Caution with Email Attachments.
• Refer to US-CERT's Security Tip on Avoiding Social Engineering and Phishing Attacks.