Andrew observed that the problem has to do with how the fact that "the clickable links in the Bing feeds the format http://www.bing/news/rssclick.aspx?redir= followed by the full URL of the site you intend to visit" and the fact that
"anyone can plug anything into the end of that URL and it will redirect to that site".

Click here to read the full WebRoot article – Spammers Use Bing to Bypass Filters, Spam Bad Links.

A trackback link from the WebRoot blog leads to an  October 22, 2009 article from GeekoPedia which includes a quotation from a Microsoft representative who stated,  “We were testing new features to improve the search experience for our customers, and during our testing, we found a bug that was causing this issue. We are taking immediate action and expect a fix in the next 48 hours.”

According to WebRoot some of the spammers were promoting fake news sites like the ones in the WorkAtHomeTruth write-up "Are Fake News Sites the Next Gold Rush?" – a play on the commonly used fake news site headline "Jobs: Is Working At Home Online The Next Gold Rush?".

The particular product that WebRoot mentions is one of the products calling itself "Home Business Kit for Google" which continue to pop up with new variations almost daily as discussed in Digging Deeper Into Hidden Negative Option scams here.

Of interest is when Adam says, "Personally, I don’t think anyone should be clicking any links received in email messages" which apparently would include even emails for which people have double-opted in including WebRoot's own email list here. Now maybe that wasn't Adam's intent, but that's how it certainly reads as of now. And honestly I've told certain people that their safest bet based on questions they've asked me at WorkAtHomeTruth is for them to completely disconnect their computer from the internet.

What's amazing to me is how quickly the spammers were able to exploit the Bing vulnerability.

Click here to go directly to the release on the FTC website (recommended).

FTC Obtains Court Order Halting Deceptive Mortgage Relief Internet Ads; Marketers Falsely Claimed to Operate MakingHomeAffordable.gov

At the Federal Trade Commission’s request, a federal district court issued an order to stop an Internet-based operation that pretends to operate “MakingHomeAffordable.gov,” the official Web site of the federal Making Home Affordable program for free mortgage loan assistance. The FTC alleged that the defendants deceptively diverted consumers who searched online for the free government assistance program to commercial Web sites that offer loan modification services for a fee.

“Homeowners who are down on their luck need help, not misdirection by Internet impostors,” FTC Chairman Jon Leibowitz said. “The Commission will continue to work with the Treasury Department to move quickly against scammers who prey upon financially distressed consumers.”

Earlier this year, in an effort to stabilize the housing market and ensure that responsible homeowners can afford to stay in their homes, President Obama announced the Making Home Affordable program to help eligible homeowners refinance or modify their mortgages. The plan will help millions of families restructure or refinance their mortgages to lower their monthly payments and make their mortgages affordable now and in the future. Using the resources on MakingHomeAffordable.gov, consumers in trouble with their mortgages can get help – at no cost – from trained housing counselors.

In a statement, Treasury Secretary Tim Geithner said, “On April 6th, FTC Chairman Jon Leibowitz, Attorney General Eric Holder, HUD Secretary Donovan and I announced a multi-agency effort to crack down on foreclosure rescue scams and loan modification fraud. Today’s swift enforcement action by the FTC demonstrates our strong commitment to protecting the integrity of the program by going after actors attempting to defraud or scam homeowners trying to use the makinghomeaffordable.gov site.”

Neil Barofsky, the Special Inspector General for the Troubled Asset Relief Program (TARP), which provided valuable assistance in the FTC’s investigation, said, “Frauds that target struggling homeowners will not go unanswered. Today’s action by the FTC, supported by the investigators of our office, demonstrates our joint resolve to stop in its tracks any individual or organization that attempts to fraudulently profit off of a national crisis.” Anyone who has been victimized in this matter should contact the FTC at 1-800-FTC-HELP. To report possible fraud in this or any other TARP-related program, complaints can also be filed at www.sigtarp.gov or 877-SIG-2009.

According to the FTC’s complaint, the defendants purchased “sponsored links” for their advertising on the results pages of Internet search engines, including yahoo.com, msn.com, altavista.com and alltheweb.com. When consumers searched for “making home affordable” or similar search terms, the defendants’ ads prominently and conspicuously displayed the Web site address “makinghomeaffordable.gov.” Consumers who clicked on this advertised hyperlink were not directed to the official Web site for the Making Home Affordable program, but were diverted to Web sites that solicit applicants for paid loan modification services. These commercial Web sites, which are not part of or affiliated with the U.S. government, require consumers to enter personally identifying and confidential financial information. The operators of these Web sites either purport to offer loan modification services themselves or sell consumers’ personally identifying information to persons who sell such services.

The FTC filed an emergency request for a temporary restraining order on Friday, May 15, 2009, in the U.S. District Court for the District of Columbia. Later that day, Judge Colleen Kollar-Kotelly entered a temporary restraining order, barring the defendants from using the MakingHomeAffordable.gov hyperlink or representing that they are affiliated with the United States government. The order also requires the four search engine providers to identify those who paid them to place the ads, and to refuse to place paid ads that contain active hyperlinks that are labeled MakingHomeAffordable.gov or any other domain name containing “.gov.” The FTC’s complaint is against one or more persons who are unknown to the agency at this time because the defendants have cloaked their practices in the anonymity of the Internet.

The Commission vote to authorize staff to file the complaint was 4-0.

NOTE: The Commission files a complaint when it has “reason to believe” that the law has been or is being violated, and it appears to the Commission that a proceeding is in the public interest. A complaint is not a finding or ruling that the defendants have actually violated the law.

The Federal Trade Commission works for consumers to prevent fraudulent, deceptive, and unfair business practices and to provide information to help spot, stop, and avoid them. To file a complaint in English or Spanish, visit the FTC’s online Complaint Assistant or call 1-877-FTC-HELP (1-877-382-4357). The FTC enters complaints into Consumer Sentinel, a secure, online database available to more than 1,500 civil and criminal law enforcement agencies in the U.S. and abroad. The FTC’s Web site provides free information on a variety of consumer topics.

Media Contact:

Frank Dorman
Office of Public Affairs
202-326-2674

Staff Contact:

Lawrence Hodapp,
Bureau of Consumer Protection
202-326-3105

(FTC File No. 0923147)
(Making Home Affordable)

Click here for full FTC Release, supporting documentation and consumer information on how to avoid mortgage scams and foreclosure rescue scams.

LEV L. DASSIN, the Acting United States Attorney for the Southern District of New York, announced that ARTHUR G. NADEL, 76, of Sarasota, Florida, was indicted today on securities, mail, and wire fraud charges stemming from a ten-year scheme to defraud investors out of millions of dollars. NADEL previously was arrested in this case on January 27, 2009. As alleged in the fifteen-count Indictment filed in Manhattan federal court:

From 1999 through January 2009, NADEL perpetrated a scheme to defraud investors in six different funds: (a) Victory IRA Fund Ltd.; (b) Scoop Real Estate LP; (c) Victory Fund Ltd.; (d) Valhalla Investment Partners; (e) Viking Fund, LLC; and (f) Viking IRA Fund, LLC (collectively the "Funds").

NADEL solicited prospective clients to invest in the Funds by making various misrepresentations about the performance and value of the Funds, including that the net asset value of each of the Funds was tens of millions of dollars. NADEL also claimed to investors that his purchases and sales of securities in the Funds had generated cumulatively more than $271 million in gains. In truth, NADEL’s trading resulted in an overall net loss in the Funds.

To further the scheme, NADEL created and caused others to create false and fraudulent client account statements, among other documents, that reflected fictitious positive returns consistent with the returns NADEL represented to investors he had achieved.

Based, in part, on NADEL's false statements, from 1999 through January 2009, more than 350 clients invested more than $360 million with the Funds. NADEL received tens of millions of dollars in management fees and performance incentive fees and, moreover, transferred and caused to be transferred millions of dollars in investor money in the Funds to accounts and entities that he owned and/or controlled. The investors in the Funds did not authorize NADEL to make these transfers, and NADEL failed to disclose them.

NADEL is charged with six counts of securities fraud, one count of mail fraud, and eight counts of wire fraud. Each securities fraud count carries a maximum sentence of 20 years in prison and a maximum fine of $5 million, or twice the gross gain or loss from the offense. The mail fraud count carries a maximum sentence of 20 years in prison and a maximum fine of $250,000, or twice the gross gain or loss from the offense. Each wire fraud count carries a maximum sentence of 20 years in prison and a maximum fine of $250,000, or twice the gross gain or loss from the offense. If found guilty on all counts, NADEL faces a combined statutory maximum sentence of 280 years’ imprisonment. NADEL is also subject to mandatory restitution. The Indictment includes forfeiture allegations which would require NADEL to forfeit the amount of money involved in the charged crimes.

NADEL is currently detained pending his meeting bail conditions set by United States District Judge DENISE L. COTE following NADEL's January arrest. NADEL is expected to be arraigned on the Indictment by United States District Judge JOHN G. KOELTL on April 30, 2009.

Mr. DASSIN praised the work of the Federal Bureau of Investigation, and thanked the United States Securities and Exchange Commission for its assistance. He added that the investigation is continuing.

Assistant United States Attorneys REED M. BRODSKY, MARIA E. DOUVAS, and JEFFREY ALBERTS are in charge of the prosecution.

The charges contained in the Indictment are merely accusations, and the defendant is presumed innocent unless and until proven guilty.

Q: What do you make of this??

Sent to me Today  April 28 2009

BARCLAYS BANK PLC.
CLAPHAM JUNCTION BRANCH,
7 ST JOHNS HILL,
SW 11 1 TN, LONDON
WWW.barclaysbank.co.uk
Attention:  Sir/Madam.

REF:- INSTRUCTION TO CREDIT  YOUR  BANK  ACCOUNT
This is to notify you about the statue of your fund right now in my
desk.

After due vetting and evaluation of your Inheritance file which The
Ministry of Finance of the Federal Republic of Nigeria Forwarded and contracted us
to see to your immediate payment.

From our findings you have been going through hard ways by paying alot
of charges to see to the release of your fund ($27 million U.S
dollars(twenty seven Million U.S American Dollars). which has been delayed.

We advice that you stop further communication with any correspondence
from Nigeria, You don't have to pay any charges to receive your Inheritance
fund anymore as you have met up with the whole requirements, your
representatives in Nigeria will tell you to still go ahead with them but on your own risk.

The only thing required from you is to obtain Non-Resident Clearance
Form/Reciept which we are not asking you to pay the fee to us here in
United Kingdom as the Government of Nigeria have paid us for handling/processing of
your payment with other customers.

We will help you to see that you obatin the form so that our bank will
effect immediate transfer of your Inheritance sum ($27 million U.S
dollars(twenty seven Million U.S American Dollars) in to your designated bank
account.

Will you follow up our directives your fund will reflect in your account within
five working Bank days from the day you obtain this form. Do not go through
anybody again but through this Bank if you really want your fund.

Please respond to my private email
(barclaysbankplc_isaecbrown01@yahoo.com)

Kindly let me have your Full Names,Telephone& Fax number to enable me
reach you on telephone. If you desire also I would let you have my telephone number
as soon as you want it. Thanks

Yours sincerely,

Mr Isaec Brown
Head, Private Banking Section.
Barclays Bank Plc

A: A fairly common scam. It's been around for a while.
You can see some variations of it at these sites:

http://www.419scam.org/emails/2007-04/18/00994932.1.htm
http://www.fraudwatchers.org/forums/archive/index.php/t-8667.html
http://www.419baiter.com/_scam_emails/08-08e/scam-email-35616.html

Paul

• The check a company sends WILL clear at FIRST.
• You will then send money BACK to the company via wire transfer
• Then the bank will discover that the check is fake.
• Then you WILL owe your bank whatever amount of money you wired.

This information is all over the news, but people still fall for it every day.

How dangerous are these scams?

Here's what Lynn Edgington of EagleResearchAssociates.org had say when I asked him for help in a situatin where a man had already deposited a bogus check into his account:

"He can thank his lucky stars he hasn't wired the money from his bank account.  He needs to know that he could still be charged with wire fraud even though all he has done is deposit the check into his bank account.  That doesn't mean he would have been charged, but they could if they wanted to charge him.  That's how dangerous this all is, and he is the only one they know, and where to find him.

He has received a bogus check, and was cashing it.  That is stealing, and depending on the dollar amount of the check will depend on which degree of felony it is.

He would be classed as an accomplice in an illegal act to defraud a bank.  Since the party who issued him the check is not a real entity that can be traced, he is the one they arrest.

By his not wiring the funds, he has reduced the charges they could bring against him.    As I said, I doubt if they would, but they could if they wanted to do so. Just like the dollar amount of the check, what his role is also plays a part in what charges they might bring.  That is why this is so scary and people have no clue they are committing  fraud, wire fraud, and also could be charged with money laundering."

What should you do if you have ALREADY deposited  a fake check?

Here's what Lynn Edgington of Eagle Research Associates says you need to do if you've already deposited a fake check:

• You need to tell the bank
• Report it to the police
• Report it do the District Attorney
• Report it to your State Attorney General – you can find the contact details from this list
• If possible get the check back from the bank and make for law enforcement. If you do online banking, you maybe able to get a photo copy of  the check from your online banking and just download it to your computer and print it out for law enforcement.
•  Make copies copies of the E-mail you've received that he answered for him to receive this check.
•  If you are to receive any goods shipped to you that you are to ship to another address, you should refuse the shipment and have it returned back to the shipper.  This keeps you from being a recipient of stolen goods.

Here's a fairly typical scenario where you can end up losing a lot of money or worse:

 Note: Sometimes scams use names of real companies in their scams to fool their victims. So, if there is a real MSP4 LLC it has nothing to do with this.

MSP4 LLC Secret Shopper Scam Step 1: Here's a version of the initial email they will send:

From: tom <thomasmild11@gmail.com> NOTE: I've redirected that email address to an error page on the WorkAtHomeTruth site in case anyone clicks on it.
Sent: Wednesday, April 1, 2009 5:27:59 PM
Subject: Job near you…

.
This Job is a great way to supplement your income. It is a fun and exciting opportunity, but it is not for everyone! Applicants should have the following: 

* Access to convenient transportation 
* 
Personal / home office: 
o 
Computer and ability to check e-mail often (the library or friend?s computer will not cut it) 
o 
Telephone (Home and Mobile phone).
* 
Good writing skills
* 
Deadline driven 

Compensation: Competitive salary, bonus, and benefits
EDUCATION and/or EXPERIENCE
Applicant must be 18 yrs older 1-2 years related experience; or equivalent combination of education and experience.
Contact the Hiring manager for more details.

DETAILS:
We turn the information (you gave us) over to the company executives and they would carry out their own duties in improving their services.
Most companies employ our assistance when people give complaints about their services or when they feel there are needs for them to improve their customer service. Your Identity would be kept confidential as the job states (secret shopper). You would be paid $100 for every survey you carry out ,bonus on your transportation allowance and funds would be given to you if you have to dine as part of the duty.
Your job will be to evaluate and comment on customer service in a wide variety of shops, stores, restaurant and services in your area. No commitment is made on this job and you would have flexible hours as it suits you. 

If you are interested do send in your:

(I)Your Full Name:
(II)Your Residence address:
City:
State:
Zip Code:
(III)Present work address:
(IV)Home and mobile Phone numbers:
(V)Email address:
(VI)Your Age and Current Occupation:
(VII)Your Gender:

So we can look at your distance from the locations which you have to put your service into, and your address would also be needed for your payments. 
Thanks.

Hiring Manager
MSP4 LLC
Thomas
  
Examples of details you would forward to us are after your shopping experience are:
1) How long it took you to get services.
2) Smartness of the attendant
3) Customer service professionalism
4) Sometimes you might be required to upset the attendant to see how they react to clients when they get tensed (under pressure).

MSP4 LLC Secret Shopper Scam Step 2: If you reply you will get the following "assignment":

DEAR SECRET SHOPPER,

I WANT TO INFORM YOU THAT PAYMENT HAS BEEN SENT TO YOU THROUGH usps (usa postal service) COURIER SERVICE AND YOU WILL GET THE PAYMENT TODAY ,HERE IS TRACKING NUMBER

       [you will see a USPS tracking number here]

YOU CAN TRACK IT AT www.usps.com

YOU ARE TO CASH THE CHECK AT THE BANK OR DEPOSIT THE CHECK IN YOUR BANK ACCOUNT,AFTER THE CHECK HAVE BEEN CLEAR, THEN USE THE  FUNDS TO CARRY OUT THE EVALUATION OF WALMART AND MONEY GRAM .

Thereafter we will be expecting an Incisive and detailed report from you via email using the pointers given as guidelines for your evaluation reports for both Wal-mart or Macy store and Money Gram evaluations.
 
You are to include the Money Gram reference code (number) and Wal-mart or Macy store receipt(TC#) number in your reports as it is required for Company feedback purposes on service delivery.
 
You will have deduct $50 for shopping at Wal-mart and also As we are Evaluating transactions above the $1000 mark, you will be sending $1000 at two Money Gram Locations.

Please remember what we are really after are the lines of question stated below. Those are guidelines to what you will lookout for during your visits to wal mart and Money Gram.

GUIDELINES

04/07/09—The IC3 has been alerted to the circulation of a fraudulent e-mail, purportedly from The Oprah Winfrey Show, notifying recipients of their nomination for the “Oprah Millionaire Contest Show.” To participate, recipients are requested to mail their contact information such as full name, address, telephone number, and e-mail address; however, no mailing address was provided. Verified contestants are then required to purchase airfare and a ticket to attend The Oprah Winfrey Show, as well as complete a forthcoming contest form containing personal questions. The contestants are then promised a seat for The Oprah Winfrey Show in April and asked to provide their responses to the personal questions for a chance to win a million dollars.

Consumers always need to be alert to unsolicited e-mails. Do not open unsolicited e-mails or click on any embedded links, as they may contain viruses or malware. Providing your personally identifiable information will compromise your identity!

Individuals who receive such e-mails are encouraged to file a complaint at www.ic3.gov.

"Here is a company that recently contacted me. It sounds to good to be true. When I called her and asked who the CEO was she hung and the signal was busy the rest of the day.

Please let me know if I really blew it by walking away."

Bottom line: AVOID.

Click to read important information about this TDK Group Inc. site at Bobbear.co.uk

Note from Bobbear.co.uk: "should not be confused with any legitimate company of the same or similar name"

Here is the email that was sent to the person that asked this question:

"Dear (name removed),

We appreciate your interest in open vacancy in our Company.

In the future please contact me at the following e-mail address:
(email address removed).

The main strategic objective of TDK Group Inc. is to dominate in the corporate market of internet trading by means of providing internet users with universal and versatile financial instrument of payment for goods and services available for sale in the web. The tactical goal of our Company is to ensure the most
reliable security level and at the same time simplicity of use and availability.

We are happy to offer you the Financial Agent position. The job qualification does not require either any special knowledge or great deal of time and effort.

Job Requirements:

- 18 years and older;
- bank account (business account  in preference);
- internet access and contact telephone where you can be reached at any time

We welcome competent and reliable attitude to work, responsibility and initiative in search of the most efficient ways of job implementation. You have to be available for contacts during the working hours and strictly follow directions of the Company.

You have a chance to make a first step to your successful future today!

Each Independent Agent is provided with employment benefits after successful
probationary period (30 days). The employment benefits include:

- stock options;
- child care subvention;
- flex-time;
- business casual attire;
- professional development programs

Also you will be able to enjoy the following advantages:

-long term credit (up to 8 year period);
-free training in improvement of professional skills in international
educational centers
-participation in incentive bonus programs
-unlimited opportunities for career promotion

You will find detailed description of your future job following the link:

(link removed)

FAQ (we strongly recommend to read) : (link removed)

Complete information about our company is here: (link removed)
About TDK Group Inc. : (link removed)
President's word: (link removed)
Management Team: (link removed)

Some important facts:

1. You don't need to invest your own money to get started.

2. Our Company undertakes to reimburse part of expenses which are incurred in
connection with money transfer (WIRE or by  Western Union/Money gram system)
should money transfer charges exceed 3. At that, your net profit will amount
to 5-8 of the total sum of payment processing operations.

3. Each remittance will be accompanied by an invoice ensuring legal validity of
transaction

4. The Company offers incentive bonus program based on results of work and
including
several factors, i.e. total sum of money transferred,  payment processing
time, etc.

If you are interested in the offered vacancy or have any questions please
contact us at e-mail address: (email address removed).

Please read our FAQ before asking any questions. Most answers could be found
there.

We sincerely hope to see you in TDK Group Inc. team as soon as possible!

Sincerely,

Kelley Wilson
TDK Group Inc.
HR Department
(contact details removed)"

Q: You guys have helped me before, now I have another issue.  I got a check in the mail for $3,950.00, from Media Inc. Financial, stated that I have been "hereby selected to participate in a paid Consumer Research Program in your area of residence as a Mystery Shopper…"

The check looks legit, I had to call them and let them know the Representative ID #, talked to assignment coordinator PAUL STONE @ 1-514-578-2591, to confirm the recept of this check.   They want me to deposit check, wait til it clears (24 to 48 hours)  then buy 140.00 item at Wal-mart, return it thirty minutes later,evaluate the return desk efficiency and then send $3,340.00 to a "Karen Nestlenut" in LA, California via Money gram and athen evaluate that procedure as well, paying me $300.00.

The breakdown of the check is as follows:  300.00 my pay, 140.00 shopping money, 170.00 service charge for money gram, 3340.00 to send to Karen Nestlenut.  Total $3950.00.

The Makret Research, Training & Consulting as it says of heading of letter, is located at 4915 Eglinton Ave. West 16th FL ON,M5R 1K7.  Do you know whats up with this?  I could use the money but it sounds very odd.

A: Once again – there MAY be a legitimate company called "Media Inc. Financial" – if so then the following has NOTHING to do with THAT company – in other words someone would be using their name without their permission.

Bottom line: This is NOT how real Mystery Shopping companies work. This is almost certainly an overpayment scam.

What will happen is that the check will clear initially because banks clear checks fast initially but don't do a full
check. Then they'll ask you to wire money back to them (they'll give you some reason). In a few days the check will bounce and you'll be liable to the bank for the amount of the check.

There are hundreds of variations of this scam, but the ending is always the same. The check will bounce and you will owe the bank the money.

You can read about one variation here:
http://migration.kentucky.gov/Newsroom/aag/mysteryshopperscam.htm

Let me know if you need anything else.

For learning about how to Mystery Shop, I'd recommend:

• http://www.mysteryshoppersmanual.com/
• http://www.katieshugs.com (see the "Message Board" link on the left).
• http://www.mystershop.org is the official Mystery Shopping Organization
• http://www.wahm.com/forum/forum_topics.asp?FID=44 Posts a lot of assignments.
• And of course the free Mystery Shopping Report here at WorkAtHomeTruth which it looks like you already found.

Lynn at http://www.eagleresearchassociates.org has explained how to report these types of checks in the past:

"The most important place to report it to is the Post Master General (USPS).

Also, tell them to contact their local DA, their state AG, and report it to ic3.  Also tell them to contact the bank listed on the check to make them aware of the situation.  Many times they're already aware, but to play safe they need to contact them to make sure they do know about them.  Also tell them to see if the company from which the check supposedly was being sent from, as well as the company the check was drawn against were real.  If so,  contact them and let them know their names are being libeled.

Many times the companies named have no idea someone is using their name to steal.  That's why we tell people to contact them.  This way the companies can also file a complaint with law enforcement and the various regulatory agencies.

Always make a copy of the check and keep it for your own file.  Make sure it is a certified copy.

You certify a check by taking it to the bank.  They make a copy and they certify the copy they made for you is a true copy of the original the copy was made from."

Related: You can find your State Attorney General at http://naag.org/attorneys_general.php

Many of the spam e-mails currently in circulation claim to be an "official order" from the FBI's Anti-Terrorist and Monetary Crimes Division, from an alleged FBI unit in Nigeria, confirm an inheritance or contain a lottery notification, all informing recipients they have been named the beneficiary of millions of dollars.  To claim the large sum, recipients are instructed to furnish their personally identifiable information (PII) and are often threatened with some type of penalty, such as prosecution, if they fail to do so. Specific PII information requested includes, but is not limited to, the recipient's name, banking information, telephone number, and a copy of their passport.

The spam e-mail allegedly from the IC3 states that the recipient has extorted money and will be given a limited amount of time to refund the money or face prosecution.

Do not respond. These e-mails are a hoax.

The FBI does not send unsolicited e-mails of this nature. FBI Executives are briefed on numerous investigations but do not personally contact consumers regarding such matters. In addition, the IC3 does not send threatening letters to consumers demanding payments for Internet crimes.

Consumers should not respond to any unsolicited e-mails or click on any embedded links associated with such e-mails, as they may contain viruses or malware.

It is imperative consumers guard their PII. Providing your PII will compromise your identity!

If you have been a victim of Internet crime, please file a complaint at www.IC3.gov.

For previous PSAs concerning e-mail scams targeting the FBI and other government agencies:

*  http://www.ic3.gov/media/2008/081205-1.aspx
*  http://www.ic3.gov/media/2008/081016.aspx
*  http://www.ic3.gov/media/2008/080606.aspx
*  http://www.ic3.gov/media/2008/080508.aspx
*  http://www.ic3.gov/media/2008/080606.aspx
*  http://www.ic3.gov/media/2007/071214.aspx
*  http://www.ic3.gov/media/2007/070717-2.aspx
*  http://www.ic3.gov/media/2007/070717-3.aspx
*  http://www.ic3.gov/media/2007/070627.aspx
*  http://www.ic3.gov/media/2006/061018.aspx
*  http://www.ic3.gov/media/2006/061013-2.aspx
*  http://www.ic3.gov/media/2006/060724.aspx
*  http://www.ic3.gov/media/2005/051201.aspx
*  http://www.ic3.gov/media/2005/051122.aspx

US-CERT is aware of public reports of malware spreading via popular social networking sites. The reports indicate that this malware is spreading through spam email messages appearing to come from Myspace.com, Facebook.com, and Classmates.com. The email contains a message indicating that there is a YouTube video available and instructs the user to follow the link to view the video. If users click on this link, they will be prompted to update Adobe Flash Player. This update is not a legitimate Adobe Flash Player update–it is malicious code.

US-CERT encourages users and administrators to do the following to help mitigate the risks:

• Install antivirus software and keep the virus signatures up to date.
• Do not follow unsolicited links.
• Use caution when downloading and installing applications.
• Obtain software applications and updates directly from the vendor's website.
• Configure your web browser as described in the Securing Your Web Browser document.
• Refer to the Recognizing and Avoiding Email Scams (pdf) document for more information on avoiding email scams.
• Refer to the Avoiding Social Engineering and Phishing Attacks document for more information on social engineering attacks.ma