International Hacker group busted

Global law enforcement team takes down alleged authors of $55M-plus scam

A federal grand jury in New Jersey today indicted three people, and five people were arrested in Italy, all in connection with the hacking into the IT systems of thousands of companies around the world to gain free access to telephone services, according to U.S. Attorney's Office in Newark, N.J..

A multinational team of investigators worked jointly to round up the alleged hackers and their financial backers in the scheme to hack into the systems of many companies -- 2,500 in the U.S. alone -- to steal access codes that the victim companies used to route phone calls through telecom systems, the office said..

The value of all the stolen services was unclear, though the U.S. Attorney's office said the thieves routed more than $55 million worth of telephone calls over telecommunications networks in the U.S.

"This was an extensive and well-organized criminal network that worked across continents," said New Jersey's Acting U.S. Attorney. Ralph J. Marra Jr., in a statement. "The hackers we've charged enabled their conspirators in Italy and elsewhere to steal large amounts of telecommunications' capacity, which could then be used to further or finance just about any sort of nefarious activity here or overseas."

Italian officials said in a press conference today that the proceeds from the group's scam funded Islamic fundamentalist groups in Southeast Asia. The five people people arrested in early morning raids in Italy today are all citizens of Pakistan. They allegedly financed in the operation.

The U.S. indictment names one citizen of Jordan, and two Philippine nationals, who had already been arrested in the Philippines in March 2007 in connection with the same theft. The U.S. indictments charge the three people -- Mahmoud Nusier, 40, Paul Michael Kwan, 27, and Nancy Gomez, 24 -- with conspiracy to commit wire fraud, unauthorized access to computer systems and possession of unauthorized access devices, including pass codes to U.S. telephone systems. Each faces up to 20 years in prison.

Techno Uptodate: Daily Updates on newly launched Gadgets, Gizmos, Mobiles, PC's & Laptops, Hacking, Gaming & Emerging Technological Trends.

Man made $112,000 in bank account hacking scheme

A Hampton, New Hampshire, man has pleaded guilty to fraud charges for his role in a scheme to empty brokerage accounts by installing malicious Trojan horse software on victims' computers.

According to court documents, Alexey Mineev set up several "drop accounts" that were then wired funds stolen from banking and brokerage accounts between July and December 2007. He pleaded guilty to one count of money laundering on Wednesday, according to Mike Ruocco, deputy to Judge Paul Gardephe of the U.S. District Court for the Southern District of New York, who is presiding in the case.

The criminals would infect PCs with malicious Trojan software that would steal account numbers and passwords whenever victims logged into their accounts online. Authorities say that another conspirator, Alexander Bobnev, would e-mail Mineev screenshots of the hacked accounts showing how much money was being transferred into Mineev's drop account, along with instructions such as "Withdraw the money ... tomorrow."

Mineev would then move the cash, sometimes as much as US$10,000, to Russia, using services such as Western Union.

Trojans are malicious programs that users install on their computers, believing them to be benign. Hackers disguise them as things such as video codecs, screensavers, and even security patches.

Account theft is a growing problem for banks and brokerage firms. They want to keep offering customers low-cost online banking services but are also sustaining losses from international criminals. Once the money has been moved offshore, it is virtually impossible to recover, security experts say.

Fraudsters often try to recruit so-called money mules to move funds from hacked accounts overseas. Often these mules are unwitting participants in the scheme, believing that they are simply doing freelance payroll work for international companies.

When charges were filed against Mineev and Bobnev last November, the U.S. Department of Justice charged a third man, Aleksey Volynskiy of New York, of also setting up drop accounts and laundering stolen money. Bobnev, of Volgograd, Russia, reportedly is out of the reach of U.S. law enforcement in his home country.

Mineev faces as much as two years in prison and a fine as high as $40,000 on the charge. In his plea agreement, he said he would return the $112,000 he made from the scheme.

Techno Uptodate: Daily Updates on newly launched Gadgets, Gizmos, Mobiles, PC's & Laptops, Hacking, Gaming & Emerging Technological Trends.

Indian Web Searcher here's the most dangerous searches

Do you know that doing a harmless online search on your favourite Bollywood actress can land you in trouble? Yes according to a recent study by computer security company McAfee, most of the popular search terms like current events, gadgets and celebrities are used by cybercriminals to lure their victims.

The study, The Web's Most Dangerous Search Terms, finds that these terms differ across the globe, while in US the most dangerous search terms include word unscrambler, free music downloads and MySpace. In France, they include poker, solitaire, deezer and billiards. Bebo, friv, hot UK deals and YouTube are the most dangerous search terms of UK.

Wondering what are the most dangerous search terms of India? Read on to find out.

Waptrick

One of the largest Mobile Java Games sites Waptrick is the most dangerous search term in India. According to McAfee the search term has a maximum risk percentage of 30.09 per cent. The `maximum risk' here refers to the maximum percentage of risky sites a user might encounter on a single page of search results.

From Waptrick site users can download free content specifically customised for phones. This includes music, ringtones, wallpapers, animations, logos and adult videos.

Katrina Kaif

The second most dangerous search term in India is the Bollywood's current heartthrob Katrina Kaif. According to the 'The Web's Most Dangerous Search Terms' report the actress is one of the most dangerous online search words in India and queries related to her name can come up with results linking to malicious software and online scams.

The report says the search word Katrina Kaif has a maximum risk percentage of 28.6.


Orkut

Google's popular social networking site Orkut ranks at no. 3 on the most dangerous Indian search terms list.

According to the report, the social networking platform has a maximum risk percentage of 25.96. Over the past few years, Orkut has been several times hit by many scams that compromise the user's computer by downloading malicious malware.

In December 2008, Orkut was hit by a Worm that compromised over 400,000 users. According to research reports, Orkut is most popular in Brazil and India.

Yahoo Mail
At no. 4 on the list is Yahoo Mail. According to McAfee report, California-based Yahoo's free email service has a maximum risk percentage of 25.96.

McAfee says, "Hackers are most successful when they can attract a large number of victims. One way to target big crowds online is to track current events - everything from celebrity meltdowns and natural disasters to holidays and popular music."

One key tool cyber criminals use to snare their victims is to get them to download a computer file or programme that comes with a malicious payload.

Shahid Kapur

Bollywood's lover boy Shahid Kapur may still not be among the most bankable stars in terms of boxoffice performance. However, the chocolate hero, courtesy his huge online fan following, surely seem to be a bankable property for criminals.

Shahid ranks at no. 5 in the list. Among the most Googled young actors, Shahid Kapoor beats his rivals Ranbir Kapoor and Imran Khan in terms of online search.

The report says that the term Shahid Kapur has a maximum risk level of 22.2 per cent. The report highlights that celebrities are used by scammers and hackers to lure internet users to download malicious codes. According to the security firm, "Hackers and cyber criminals are often able to persuade searchers to download files carrying malicious software that can cause consumers to expose their personal and financial data."

Rediffmail

Free email service Rediffmail is at no. 6 on the list of most dangerous search terms in India. The maximum risk percentage of search term Rediffmail is at 20 per cent, according to McAfee report.

How to earn money

Another dangerous search phrase is: 'How to earn money'. With the global economic crisis leading to huge job losses, the phrase has shot up on Internet searches.

The report says that the term has a maximum risk percentage of 16.7. Also, with global economic crisis, the report says many scammers would zero in on growing pool of victims looking for methods. Also, the report highlights that the chance to make good money while you 'work from home' lures many people to their first run in with Internet scammers.

During the recession, McAfee has observed a growing number of malicious search results targeted at people who want to save money or earn extra income.

Namitha Kapoor

An online search on Telegu actress Namitha Kapoor can be as dangerous as looking for 'How to earn money' ideas. Namitha according to the report has a maximum risk level of 16.7 per cent.

The South Indian beauty's growing popularity on the Web is exploited by scammers in luring the Netizens to phishing and other online scams.

Shimla

Many people may not find Shimla a perfect holiday destination, however, the capital of Himachal Pradesh continues to be the most popular destination, a fact reflected by its online search rating.

Shimala continues to be high on search rating charts and with it, its risk level. The term Shimla shares maximum risk percentage of 16.7 along with 'How to earn money' and Namitha Kapoor.

According to the MacAfee report, popular places like these are used to lure unsuspecting consumers to websites. Hackers and cyber criminals are often able to persuade searchers to download files carrying malicious software that can cause consumers to expose their personal and financial data.

Beijing 2008 Olympic games

At no 10 on the list of most dangerous web search terms in India is Beijing 2008 Olympic games. According to McAfee report, the term has a maximum risk level of 14.3 per cent.

During the games, users were warned of Olympic themed messages as many phishing attacks lured Netizens with messages declaring recipients winners of the Olympic lottery.

Five Free Tips To Avoid Security Hacks

Security software is still the lock on your PC's front door, but we have some tricks to make your front door a little less attractive to crooks.

Let's talk about security hacks—simple yet clever ways to protect yourself in the physical and cyber worlds that cost little or nothing.

The premise behind tricks like this is not that any one—or even all—of them is guaranteed to protect you thoroughly, but rather that each of them will make stealing your system or data difficult or unappealing. It should go without saying that neither one nor all of these can replace good, up-to-date antivirus and firewall protection .

The classic non-tech security trick is using motion detection spotlights or lights on a timer—even fake video cameras or surveillance warning signage—to give the impression that your home or business is occupied. No thief actually wants to be seen, and few want to chance confrontation. Along similar lines, there are easy and free ways to make your computer and data less available to thieves.

1. A surprisingly effective PC security trick is simply to remove the keyboard and mouse. I discovered this when the keyboard on my laptop died and I had to use an external keyboard for a while. It's highly unlikely that a snoop will carry an extra keyboard and mouse with him. This will slow someone down but is far from foolproof, and it should go without saying that every computer should be physically locked to a sturdy object and secured behind a strong password.

2. To protect from podslurping (the connecting of an unauthorized USB device and its use to steal data), disable your USB ports. Or—and we borrowed this one directly from the U.S. military—epoxy over the USB ports. Too permanent? A slightly more elegant solution is to open the PC case and disconnect (or cut) the wires running from the motherboard to the USB ports.

3. Traveling with a laptop? Try not to advertise that you're carrying a valuable piece of equipment: Use a computer bag that doesn't look like a computer bag, or use a neoprene sleeve inside a regular backpack. If you nap at the airport, wrap the shoulder strap around your arm or leg so you'll be alerted if someone tries to walk away with your bag.

4. Here's an easy way to hide your Windows PC on a network while maintaining access to network resources. (This also works when you want stealth but still want to let others access your shared resources.) At the command prompt, type Net config server /hidden:yes. Now you're still a member of your network neighborhood but your PC won't show up when others browse for it. Make sure your software firewall is turned on, and block incoming ICMP traffic. This will prevent a network intruder from scanning for your PC using a ping sweep.

Once you are hidden on the network, you can spend some time trying to figure out who—if anyone—is connecting to your PC and to whom your PC is connecting. To accomplish this, you'll use the command-line tool Netstat and the Task Manager. Get to the command prompt and type netstat –ao. A bunch of info will flash by on your screen listing the type of connection, the IP addresses of remote hosts, the protocols, and the process identifier, or PID. If there's something here you don't recognize, write down the PID. Now, open the Task Manager and add the PID column by opening the View menu and clicking on Select Columns. Check the box next to PID. Now match the PID from Netstat and the PID from Task Manager to learn which applications are holding which ports open. A well-secured machine should have ports open only for authorized apps.

5. One last idea: Enabling secure log-on in Windows XP and Vista will protect your system from malware that attempts to impersonate a log-on screen to steal system passwords. This forces anyone trying to log on to press Ctrl-Alt-Del first. In Windows Vista, open the Run command, type netplwiz, and click Continue when prompted by User Account Control. In the Advanced User Account window, click the Advanced tab, then select the box that says Require users to press Ctrl-Alt-Delete. In Windows XP, go to the Control Panel's User Accounts applet. In the Advanced User Account window, click the Advanced tab, then select the box that says Require users to press Ctrl-Alt-Delete.

Hack Attacks Testing

-: Hack Attacks Testing :-A network security breach (a hack, crack, or other invasion) occurs when unauthorized access to the network is achieved and havoc results. The best possible defense is an offensive strategy that allows you to regularly test your network to reveal the vulnerabilities and close the holes before someone gets in. Written by veteran author and security expert John Chirillo, Hack Attacks Testing explains how to perform your own security audits. * Paperback: 576 pages

Download

(Size :- 6.80 MB)

Tips for safe online shopping

NEW DELHI: Shopping online offers you several advantages such as speed, convenience of doing it from your desk rather than braving traffic, and
a wide choice... But these advantages can only benefit you if you take care of the most important aspect while shopping online: safety.

Safety is of prime importance when shopping online -- you can face not only commercial loss if you are not careful, but in extreme cases stand a chance of your identity being appropriated. The following tips can help you determine whether the website you are planning to use is secure and trustworthy or not.

Be careful before you select a store

Do your homework. Go through the ratings and reviews given by previous customers of the website. Make sure you have one other way of contacting them; a phone number or a mailing address. Also, gather information about the website from the ‘About us’ section.

Review their shipping methods and policies to determine what carriers they use, their shipping rates, and if they provide tracking and insurance. Also find out where they ship from -- goods are sometimes sent from international locations, which require customs and extra time.

Misspellings and grammatical errors are indicators that a website might be fraudulent. You can simply browse through the website to check if it is authenticated and protected. Trust marks such as the VeriSign Secured Seal, or a green address bar in Internet explorer.

Colour-coded address bars are a feature of Extended Validation Secure Sockets Layer (SSL) certificates, which provide added information about a website's authenticity.

The site should not ask for more than your name, shipping address, billing address, credit card type and number, or expiration date.

Choosing a payment service

Always be sure of your method of payment. If you have a choice, follow these tips to choose a more secure service: Read the privacy policy and make sure you agree with it. If you don't, go elsewhere.

Check for a stamp of approval from the BBBOnline (the Better Business Bureau Online) or Verisign.Find out what others say about the service: check with your colleagues and friends.

Avoid third-party payment

Never respond to email messages from third-party payment services asking you to confirm account details, such as passwords or other personally identifiable information. These email messages could be an identity theft scam, such as phishing.

Type the address of the payment service directly into your browser or use your personal bookmarks. If you need to update your account information or change your password, visit the website by using your personal bookmark or by typing the URL directly into your browser.

Check if the seller has been a verified member of the payment service for a few months or more. Some sites also allow you to check the seller's rating -- although these ratings cannot be guaranteed, they can be helpful.

Never use your account to transfer money for someone else that you don't know. This might be an advanced fee fraud.

Be more careful when you purchase very expensive items, such as jewelry or computers, especially around the holidays and for items that are sold out in stores.

Before you enter your credit card number

So, you've found the perfect item at the perfect price and you're ready the purchase. Before you enter your credit card number, make sure the store you've chosen abides by the following rules.

The company should only require personal information that's necessary to complete the purchase: You will probably enter your credit card number, address, and telephone number. Be wary if they ask for other information such as your PAN card, bank account numbers, license numbers or your mother's maiden name.

The website should use secure technology. When you get to the screen where you enter your credit card number or other personal information, make sure that the Web address begins with https and check to see if a tiny locked padlock appears at the bottom right of the screen.

In your internet explorer there is another layer of protection with sites that use Extended Validation (EV) SSL Certificates. The address bar should turn green to alert you that there is more information available about the website. The identity of the website owner is also displayed on the address bar.

An EV SSL certificate not only helps ensures that the communication with a website is secure, but also includes information about the owner of the website, which has been identified by the Certification Authority (CA) issuing the SSL Certificate.

Update your Internet Explorer regularly

Internet Explorer includes improved security features that make it easier to see which sites provide more secure data exchange, so you can shop and bank online with confidence.

Hence, it is important to that it keep updating it regularly. You can download Internet Explorer 8 which also has a protection from malware and phishing. The anti-malware protection works by presenting you with a warning or blocking screen when you visit a malicious site or attempt to download a malicious programme.

It is also important to keep all the other software on your PC up to date -- use Microsoft Update to install all critical and optional updates, and make sure your browser add-ons and other applications are current. You should also install a current anti-virus product and keep its signatures up to date.

Pay attention to security warnings from your firewall and anti-virus software and make sure your firewall is on and up to date. And, finally, make sure that your Internet service provider has spam protection, so that less unwanted and fraudulent email reaches your inbox.

Hacking: Free Security Hacks

Security software is still the lock on your PC's front door, but we have some tricks to make your front door a little less attractive to crooks.

Let's talk about security hacks—simple yet clever ways to protect yourself in the physical and cyber worlds that cost little or nothing.

The premise behind tricks like this is not that any one—or even all—of them is guaranteed to protect you thoroughly, but rather that each of them will make stealing your system or data difficult or unappealing. It should go without saying that neither one nor all of these can replace good, up-to-date antivirus and firewall protection .

The classic non-tech security trick is using motion detection spotlights or lights on a timer—even fake video cameras or surveillance warning signage—to give the impression that your home or business is occupied. No thief actually wants to be seen, and few want to chance confrontation. Along similar lines, there are easy and free ways to make your computer and data less available to thieves.

1. A surprisingly effective PC security trick is simply to remove the keyboard and mouse. I discovered this when the keyboard on my laptop died and I had to use an external keyboard for a while. It's highly unlikely that a snoop will carry an extra keyboard and mouse with him. This will slow someone down but is far from foolproof, and it should go without saying that every computer should be physically locked to a sturdy object and secured behind a strong password.

2. To protect from podslurping (the connecting of an unauthorized USB device and its use to steal data), disable your USB ports. Or—and we borrowed this one directly from the U.S. military—epoxy over the USB ports. Too permanent? A slightly more elegant solution is to open the PC case and disconnect (or cut) the wires running from the motherboard to the USB ports.

3. Traveling with a laptop? Try not to advertise that you're carrying a valuable piece of equipment: Use a computer bag that doesn't look like a computer bag, or use a neoprene sleeve inside a regular backpack. If you nap at the airport, wrap the shoulder strap around your arm or leg so you'll be alerted if someone tries to walk away with your bag.

4. Here's an easy way to hide your Windows PC on a network while maintaining access to network resources. (This also works when you want stealth but still want to let others access your shared resources.) At the command prompt, type Net config server /hidden:yes. Now you're still a member of your network neighborhood but your PC won't show up when others browse for it. Make sure your software firewall is turned on, and block incoming ICMP traffic. This will prevent a network intruder from scanning for your PC using a ping sweep.

Once you are hidden on the network, you can spend some time trying to figure out who—if anyone—is connecting to your PC and to whom your PC is connecting. To accomplish this, you'll use the command-line tool Netstat and the Task Manager. Get to the command prompt and type netstat –ao. A bunch of info will flash by on your screen listing the type of connection, the IP addresses of remote hosts, the protocols, and the process identifier, or PID. If there's something here you don't recognize, write down the PID. Now, open the Task Manager and add the PID column by opening the View menu and clicking on Select Columns. Check the box next to PID. Now match the PID from Netstat and the PID from Task Manager to learn which applications are holding which ports open. A well-secured machine should have ports open only for authorized apps.

5. One last idea: Enabling secure log-on in Windows XP and Vista will protect your system from malware that attempts to impersonate a log-on screen to steal system passwords. This forces anyone trying to log on to press Ctrl-Alt-Del first. In Windows Vista, open the Run command, type netplwiz, and click Continue when prompted by User Account Control. In the Advanced User Account window, click the Advanced tab, then select the box that says Require users to press Ctrl-Alt-Delete. In Windows XP, go to the Control Panel's User Accounts applet. In the Advanced User Account window, click the Advanced tab, then select the box that says Require users to press Ctrl-Alt-Delete.

How Hackers get into your PC

How hackers get into your PC

For a hacker common methods for finding your IP address is through chatrooms, looking up domain names on a domain name registrar site, or running programmes that can create a log of all valid IP addresses.

In a chatroom, all a hacker has to do is right click on a chat ID and get the IP address. A domain registrar can yield a website’s employees’ names, phone numbers, fax numbers, physical addresses and IP addresses. In ‘social engineering’ a hacker verbally chats up the user and gets his IP address and other important information. Here’s looking into how a hacker can break into a PC and misuse it.

How it works

With the users IP address, a hacker can send programmes to his PC to test the system for vulnerabilities. He can even find bugs, or holes in the software. The file- and print-sharing options allow the hacker to access the user’s hard drive, load any programme on the drive and delete/change any file on his PC.

The hacker may use ‘Trojans’, which pretend to do useful tasks--like playing a video or greeting--but actually help him access info from the computer and/or even take it over. Programmes that allow the hacker ‘backdoor’ entry to a computer are commonly available.

These programmes are used daily and legitimately by many systems administrators for remote systems. Hackers change the names of their programmes to make them look like legitimate system programmes.

Or they create a hidden folder on the user’s computer to keep programmes. The most common way that viruses are spread is through e-mails. Usually, the virus is not in the e-mail itself, but as an attachment.

Cracking passwords

Hackers use programmes to crack passwords. Even a password-protected computer can be broken into and other passwords then cracked.

A password cracker dictionary has common computer terms and phrases, names, slang and jargon, easily typed key sequences (like ‘qwerty’), and phrases one might commonly use as a password.

Programmes to crack passwords are handed out with copies of these dictionaries. A common method for cracking passwords is to get a copy of a system’s password file. It lists all encrypted passwords on the system

Security breach

A hacker can steal and delete files, load dangerous programs on a PC and involve people in computer crime. He can get your home, office and even bank passwords.

A hacker can even see the screen as the user sees it, watch every move of his mouse and see every word he types.

Often, the hacker is not interested in the hacked system. He just wants to hack into larger systems or send e-mails. A hacker can load a programme onto hundreds of hacked PCs and then direct the PCs to bomb a particular firm’s server with junk mail or problem messages.

Specific measures

The user must keep in mind not to visit chat rooms unless they are closed and he knows the administrator. One must almost never open an attachment that ends in .DLL or .EXE, even if the email is from one’s best friend. The only time one can open such attachments is if he knows what’s in them.

In order outwit script-based viruses; it is adviceable to ask an expert how one can open scripts in Notepad or Wordpad. Then he should get someone who knows Visual Basic to look at it. If the user is not on his PC, but sees its modem lights flash, it means a hacker could be testing for vulnerabilities.

Password protection

A good password is easily remembered, but not easily guessable. It should be kept a secret, never written down and never saved in a file. When a website asks if a password should be saved, always say no. A password ideally should have at least six or more letters, numbers or punctuations. The letters should be in capitals and lowercase. It should not have four or more letters found consecutively in the dictionary. Here reversing the letters won’t help.

Deadliest Hacking Mails you might get

Deadliest Hacking Mails you might get

With online threats becoming bigger, more sophisticated, more camouflaged and deadlier, it is time to relook every single click you make while you are on the Internet. In fact, given the surfeit of new threats, it would not be a bad idea for most of the Internet surfers to reconsider their online habits. With the Net being increasingly used by a large number of people for various bill payments, banking, investments, ticket bookings and reservations, e-commerce, social networking, communication and much more, it is time people paid heed to the threat of dangers lurking around at every step, and form a counter strategy. It is critical to know these lurking threats so that you don't fall prey to scamsters and fraudsters and compromise your security and monies. Here is a list of some of the common tricks played by scammers.

You have not paid for the item you recently won on eBay. Please click here to pay.’

Many consumers visit auction sites to find gifts or personal buying. But such shoppers must be aware of scammers who use auction sites to find their preys. A very common trick according to CSO, are mails notifying the users that he has 'not paid for the item you recently won on the site. Please click here to pay.' These emails impersonate complaints from the popular auction sites for non-payment of winning bids. People using online auction sites often bid days before a purchase is complete. So, it is not difficult for a person to believe that he has forgotten about a bid he made a week before. Experts believe that such phising mails play on a person's concerns about the negative impact this may have on their auction site score. Like in case of eBay, people generally spend years building eBay feedback score or `reputation,' hence the chances are that they will quickly react to such emails. Many consumers visit auction sites to find gifts or personal buying. But such shoppers must be aware of scammers who use auction sites to find their preys. A very common trick according to CSO, are mails notifying the users that he has 'not paid for the item you recently won on the site. Please click here to pay.' These emails impersonate complaints from the popular auction sites for non-payment of winning bids. People using online auction sites often bid days before a purchase is complete. So, it is not difficult for a person to believe that he has forgotten about a bid he made a week before. Experts believe that such phising mails play on a person's concerns about the negative impact this may have on their auction site score. Like in case of eBay, people generally spend years building eBay feedback score or `reputation,' hence the chances are that they will quickly react to such emails.

`You've been let go. Click here to register for severance pay.'

Scammers are finding novel ways to cash on the present downturn. This trick comes from the same. The mounting number of layoffs has made employees anxious about their jobs. This is what fraudsters are exploiting on. The message appears to have come from HR dept (cons employer's email ID) and often says: You have been let go due to a layoff. If you wish to register for severance please register here.' Little surprisingly, the message carries a malicious link.

This mail is Shivram from tech services. Your PC is infected.’

This is another common trick that scammers play. To cause maximum damage, such mails usually coincide with a related event. This means during the time of a widespread malware attack or a virus spread (say during the recent Downadup worm attack). In such messages, hackers paint a destructive image of the damage that the worm attack can cause to the user. The aim is to exploit and cash on people's fear and uncomfort with technology.

Someone has a secret crush on you! Click on this link to find who it is!’

This is one of the oldest tricks. But still seems to be working. The message seems to come from a dating or a social networking site and asks the reader to click on a link or download an application. Sadly, in ninety percent of such cases, after clicking on the link, you not only don't find your secret admirer, -- you also download malicious software that you can't even detect. Of course, it's designed to steal personal and financial information. Stay away from such "secret admirers".

Did you see this video of you? Check out this link!’

This is another popular scam. Security experts are seeing an increase in such spam, especially on Twitter, the popular microbloging site. A recent spam campaign on Twitter read: "Did you see this video of you?" Thinking it to be from a friend many users ended up clicking on it and landed up at a fake Twitter site. Once there, unsuspecting users entered passwords, which then ended up in the hands of hackers.

Please confirm this order'

Another popular scam is fake invoices. Here's how this scam works: The bad guys create a fake invoice and sends it via email as an attachment. Once the user opens the email attachment, there are a few variations of it. The recipient may be asked to confirm or cancel an order, they may be told that the parcel service was unable to deliver a package due to incorrect address, or the recipient may receive a customs notification about an international package. In all the cases, the order appears as a great bargain. In every instance, the email either asks users for their credit card details so that their account can be credited or requires the recipient to open an invoice or customs form to receive the package.

Check out our new Discount menu'

Many retail sites offer discounts during the festive season or during changing season(popularly called off season discounts. Casing on these, spammers try to send mails to lure people to enter bogus sites and reveal their credit card details. The fraudsters clone a retailer's site. And when a user clicks on the fake voucher, they are taken to this site, and prompted for login or credit card details, which the criminals then use to carry out identity theft. Recently, Websense Security Labs discovered infectious emails wherein victims were receiving messages promoting a coupon from McDonald's or a holiday promotion from the Coca-Cola company. Both messages include a .zip attachment that contains either coupon.exe or promotion.exe. The malicious files are Trojan Droppers. While the McDonald's email claims to present their latest discount menu, and states that the attached coupon should be printed; Coca-Cola email states that the attachment has details about their new online game and a chance to win Coca-Cola drinks free for life.

I'm traveling and I've lost my wallet. Can you wire some money?’
	The popularity of social networking sites has given a new platform to scammers. A recent scam according to experts involves the fraudster posing as a Facebook `friend.' They send a message or IM on Facebook claiming to be stuck in a foreign city and they say they need money. Ironically, many innocuous social networking site users fall to such SOS mails, and wire money.