E-mail phishing scams using the Better Business Bureau’s name and logo continue to proliferate across the web. Most of the e-mails carry the famous BBB torch logo and come with the subject line “Complaint from your customers” or “Urgent: Your Prompt Reply is Necessary” but new subject lines are still popping up.
The e-mails have a link or an attachment containing malicious phishing malware that steals information, often with devastating results. We also believe that the virus lies dormant on the computer for a period of time, only to eventually resend itself to the victims contact list.
One firm reported that they opened the affected attachment, which launched malware that quickly found the accounting office’s computers, accessed bank numbers and passwords, and nearly completed a fund transfer from the company’s account. Because of experiences such as this one, the BBB recommends the following to anyone who receives the e-mail:
Do not open any attachments
Do not click on any links
Forward the e-mail to phishing@council.bbb.org
Delete the e-mail from your inbox, and then delete it again from your trash or recycling folder
Run a full system scan using reputable virus software
If you receive an e-mail saying your business has a complaint filed against it with BBB, there are several things you can do to authenticate it:
Look for typos, grammatical errors, etc., in the text that could indicate it originated overseas.
Check to see who it says it is from. Complaints go out from the local BBBs, not from the headquarters office.
Hover your mouse over the link to see if its destination is really a bbb.org address.
If you still are not sure, contact us at info@centralgeorgia.bbb.org or info@csra.bbb.org to ask if you really have a complaint (do not reply to the e-mail you received).
The BBB System is working with federal law enforcement agencies to identify the perpetrators of this fraud and has employed the services of a phishing deactivation service to shut down the sites that were hosting the malware. As of last week, more than 50 sites had been shut down. Deactivating the websites set up by the scam artists ensure that recipients who click on the link in the scam e-mails won’t have a virus loaded onto their computers. It does not, however, prevent the e-mails from going out in the first place.
Always be cautious about clicking on links or opening attachments from people or agencies that you are not in active communication with. While you may be familiar with organizations like the BBB, IRS, FBI or some popular banks, don’t automatically assume the e-mail that you receive is actually from that organization.
Kelvin Collins is president/CEO of the Better Business Bureau of Central Georgia & the CSRA Inc. serving 41 counties in the central Savannah River area. This tips column is provided through the local BBB and the Council of Better Business Bureaus. Questions or complaints about a specific company or charity should be referred directly to the BBB at Phone: (800) 763-4222, website: www.bbb.org or e-mail: info@centralgeorgia.bbb.org or info@csra.bbb.org.
