Airline Fake Email Attacks Continue...

This week we have already reported on the new attack of fake emails related to Hawaiian Airlines. The problem is not yet solved and several other airlines warn their customers about bogus emails. This time hackers are trying to trick customers of Delta and Northwest airlines.

Fake emails are sent as ticket invoices purportedly being from one of these Airlines. In these emails recipients are thanked for using "Buy flight ticket online" service on the website. They are given a login name and a password and are prompted to download an attachment with the ticket invoice. The required amount of money for the tickets in the email is usually $400.

However, this attachment (.zip format) is in fact a Trojan used by hackers to steal personal and financial information. A threat researcher at McAfee Craig Schmugar notes that the stolen data, including keystrokes, is transferred to the server hosted in Russia. Different security companies have labeled this malware differently. Some of its possible names include „Spy-Agent.bw" and "Infostealer.Monstres".

In the last week's statement, Northwest Airlines' vice president of e-commerce, Al Lenza, warned all customers that "NWA itineraries are specific and contain information that a customer will recognize. If the format does not look familiar to you, and you have not recently purchased a ticket, do not open the attachment. Delete the e-mail right away."

The same position is taken by the Delta Airlines. Their statement claims "Be assured that Delta did not send these emails, and our customers' credit cards have not been charged as a result of the e-mails." Users are once more asked not to open any suspicious emails and their attachments.

Resources:

http://www.etravelblackboard.com

http://www.networkworld.com