BIRMINGHAM, Ala. – Cyber criminals are using fake messages claiming to be from the FDIC to deliver a virus capable of stealing unsuspecting victims' bank passwords and other sensitive personal information, the banking regulator warned last week.
The spam is being delivered with one of two subject lines that read ‘FDIC has officially named your bank a failed bank’ or ‘You need to check your Bank Deposit Insurance Coverage.’
Once the message is opened the spam asks users to visit a specific Web site, a link to which is included in the message. Those that follow the link are taken to a page that asks them to click and download a copy of your personal FDIC insurance file.
The spam claims to be from the e-mail address consumeralerts@fdic.gov, which is a real e-mail address used by the FDIC, but has been forged by the malware distributors in this situation.
