Stories
Slash Boxes
Comments

SoylentNews is people

posted by janrinok on Tuesday July 31 2018, @01:22PM   Printer-friendly
from the old-but-tested dept.

State Govts. Warned of Malware-Laden CD Sent Via Snail Mail from China

Here's a timely reminder that email isn't the only vector for phishing attacks: Several U.S. state and local government agencies have reported receiving strange letters via snail mail that include malware-laden compact discs (CDs) apparently sent from China, KrebsOnSecurity has learned.

This particular ruse, while crude and simplistic, preys on the curiosity of recipients who may be enticed into popping the CD into a computer. According to a non-public alert shared with state and local government agencies by the Multi-State Information Sharing and Analysis Center (MS-ISAC), the scam arrives in a Chinese postmarked envelope and includes a "confusingly worded typed letter with occasional Chinese characters."

Please insert in election computer.

Also at TechCrunch and Engadget.


Original Submission

 
This discussion has been archived. No new comments can be posted.
Display Options Threshold/Breakthrough Mark All as Read Mark All as Unread
The Fine Print: The following comments are owned by whoever posted them. We are not responsible for them in any way.
  • (Score: 5, Interesting) by Grishnakh on Tuesday July 31 2018, @04:36PM

    by Grishnakh (2831) on Tuesday July 31 2018, @04:36PM (#715267)

    Why? I don't see the problem here. I think people should happily insert these CDs into their computers, and if this causes all kinds of havoc, then they got what they deserved.

    If you're running an OS that can be compromised by merely inserting an optical disc into the drive, you're doing something very, very wrong, and you deserve whatever happens to you.

    (Hint: any OS that auto-runs anything from removable media is not an OS that you can trust with any important data.)

    As for China, should you be more critical of someone who tells someone "please stand here calmly while I punch you in the face" and then does so, or should you be more critical of the idiot who actually willingly stands there and allows themselves to be punched? Personally, I'm more critical of the latter. Abject stupidity should never be excused.

    Starting Score:    1  point
    Moderation   +3  
       Insightful=1, Interesting=2, Total=3
    Extra 'Interesting' Modifier   0  
    Karma-Bonus Modifier   +1  

    Total Score:   5