Here's the latest email spam campaign that you should know about ...

---

US-CERT Current Activity - U.S. Customs and Border Protection Email Attack

Original release date: July 25, 2008 at 3:09 pm Last revised: July 25, 2008 at 3:09 pm

US-CERT is aware of public reports of an attack circulating via bogus email messages that claim to be from "US Customs Service." The messages may contain the subject line "Parcel requires declaration"
and indicate that a parcel has been received addressed to the recipient of the email. These messages may also encourage users to open an attachment to the message that may contain malicious code.

US-CERT encourages users to do the following to help mitigate the risks:

• Review the alert posted by the U.S. Customs and Border Protection regarding this issue.
  
  
• Do not open attachments contained in unsolicited email messages.
  
  
• Refer to the Recognizing and Avoiding Email Scams (pdf) document for more information on avoiding email scams.
  
  
• Refer to the Avoiding Social Engineering and Phishing Attacks document for more information on social engineering attacks.
  
  
• Install anti-virus software and keep virus signature files up to date.
  

US-CERT will provide additional information as it becomes available.

Relevant Url(s):

http://www.us-cert.gov/cas/tips/ST04-014.html

http://www.us-cert.gov/reading_room/emailscams_0905.pdf

http://www.customs.gov/xp/cgov/newsroom/alerts/email_virus.xml

====

This entry is available at: http://www.us-cert.gov/current/index.html#u_s_customs_and_border