Online Scams Exploit Katrina Disaster

By Ed Oswald | Published September 1, 2005, 3:57 PM

In the wake of hurricane Katrina, several online scams have begun to circulate the Internet, according to several security firms. Sophos warned users on Thursday not to open a malware-Infected e-mail posing as news on the disaster.

Possible subject lines of the e-mail could be "Re: g8 Tropical storm flooded New Orleans", "Re: g7 80 percent of our city underwater", and "Re: q1 Katrina killed as many as 80 people". The group said there could be additional variants.

BetaNews on Thursday morning had received a variant of the above e-mails, however it appeared that the variance is the letter and number combination following the "Re:" prefix.

In the body of the message, clicking on the "Read More.." link will take the user to a malicious Web site that poses as a news story. In reality, the site uses code to exploit vulnerabilities within Internet Explorer to install malware including the Troj/Cgab-A Trojan horse.

From there, the attacker could remotely access the user's computer.

"Receiving or reading the emails themselves does not mean you are infected," Graham Cluley, senior technology consultant for Sophos said.

The SANS Institute is reporting that there are several e-mails soliciting donations through a Paypal link. According to SANS, it may be difficult to tell whether the e-mail is from a legitimate organization.

"The hurricane is a dreadful natural disaster, and it's sickening to think that hackers are prepared to exploit the horrendous situation in an attempt to break into computers for the purposes of spamming, extortion and theft," added Cluley.

After discovery of the sites yesterday, several have been removed. "There are now about 230 .com domains that contain the strings 'katrina' and 'hurricane'. We will make a list of more domains like this public soon to ask for your help to review them," SANS said on its Web site.

Comments

View comments by with a score of at least

Hi, Im wondering about an online scam. I have a lot of clothing to donate and would like to donate directly so that I know its going where it's needed. I posted something on a Katrina Volunteer site and have gotten some replies, how can you tell who is actually a Katrina survivor and who just wants free stuff?

Score: 0

|

This always happens, i don't know why people act so shocked:

"The hurricane is a dreadful natural disaster, and it's sickening to think that hackers are prepared to exploit the horrendous situation in an attempt to break into computers for the purposes of spamming, extortion and theft"

We know this already,I believe it is right to be aware of the situation, but i don't know why we waste our breath on the hackers.

We should say, be aware of these ****er's, watch your inbox, the end.

Score: 0

|

Read a little Konrad, Golding or Georges Simenon. There is no point beyond which evil will not go. These despicable acts may be more noticible in a crisis, but they occur every day. We are, by and large, an ignorant and evil people. If we started shooting all the evil people, we wouldn't have enough left to populate Peoria, Illinois.

Score: 0

|

Man, there are SO many things wrong with this article. First of all the individuals sending these e-mails are not "hackers". They are crackers and spammers. Let's use the right terminology. None of the hacking community would lay claim to taking advantage of this terrible catastrophe. The people doing this are worthless individuals just like to looters that are running around New Orleans stealing Jewelry and electronics (in a city with no electricity, no phone, and no internet.) People are living on their roofs because their houses are flooded or are living in homes with no running water, little to no food, and in many cases dead family members and friends in the house or on the sidewalk outside the house...... Crackers, spammers and looters need to be shot...

Score: 0

|

The hurricane is a dreadful natural disaster, and it's sickening to think that hackers are prepared to exploit the horrendous situation in an attempt to break into computers for the purposes of spamming, extortion and theft," added Cluley.

hackers are just a part of the scum of the earth ready to misuse others misery to their benefit. it is a pity our socalled "civilized" society has no other way to confront this evil then by trying to deal with it in a "civilized" way...even the death penalty would be too much honour...lets see if with the same speed and cunning, they caught the presumed authors of zotob, they could apprehend some of this filth....

Score: 0

|

Crackers, not hackers.

Hackers = People who hack forums to make them work better for their site
Hackers = People who hack graphics card drivers to make them faster

Crackers = People who break into something usually for personal gain at the expense of others.

Idiots who keep quoting 'hackers' when referring to crackers = People who *seriously* need to sort their terminology out before opening their mouths.

On your point though, yes *cr*ackers and scammers should have a little section of the internet all to themselves, and they can scam the crap out of each other.

Score: 0

|

Tragedies will bring out the best in most and, regretably, the worst in a few scum buckets.

Score: 0

|

Edit: oops misread the article. Anyway this always happens remember 911. Some people have no shame.

Score: 0

|

Some people will do anything for the Almighty Dollar, or to stoke their own sense of power and accomplishment.

I'm actually glad the media, at least around here, is focusing more on the relief efforts than the scamemr, looter, and others looking to make profit/personal gain from this tragedy.

Let them deal with the greedy once the emergency has subsided.

Score: 0

|

People can be real a$$holes.

Score: 0

|

I hope they catch at least one of these scmamers. Freeze all of their assets and put them all into the relief eforts.

Score: 0

|

Or, even better, house them with the 15,000 or so refugees in a sports stadium, with "Hurricane Scammer" written on their T-s***s.

Score: 0

|

There's enough violence and pain in that dome right now as it is. No need to add to it.

Simply donate their finances to the relief effort. Then deport their asses to another country and let them deal with 'em.

Score: 0

|

"Then deport their asses to another country and let them deal with 'em."

what?

Score: 0

|

I should be more specific. The scammers, not the victims. :P

(It was a joke...you'd have to be up on your Irish history to get it though...sorry)

Score: 0

|

Breakthrough: AMD and Intel settle antitrust dispute, reach new cross-license agreement

UPDATED Only exclusionary business practices, not some rebates, may be covered by a new agreement on Intel's future business conduct.

Windows Marketplace for Mobile now available in browser, iTunes' App Store still not

You can now check out what Windows Marketplace for Mobile has to offer without a Windows Phone.

Microsoft damage control after marketer claims Win7 inspired by Mac

Have you ever said anything you wish you could take back? Ever? No? Not even once? Well then, you won't sympathize with a mid-level Microsoft manager today.

Facebook for iPhone developer goes from Apple supporter to 'I quit!' in 3 months

Fed up with Apple's App Store policies, the developer of Facebook for iPhone has bailed on the iPhone.

PS3, Xbox to soon get Twitter, Facebook integration

Both Microsoft's Xbox 360 and Sony's PlayStation 3 will integrate with Facebook in the near future.

The iTunes App Store at 100,000: Can we stop counting, already?

Carmi Levy | Wide Angle Zoom: Is a six-digit number truly reflective of a healthy applications ecosystem? Or is it another type of bloat?

Analysis: The end of business-by-litigation?

The AMD v. Intel case ended neither with a bang nor a whimper, but almost with a song. Is it catchy enough for the rest of the PC world to sing in perfect harmony?

The agreement: Intel and AMD 'wipe the slate clean'

As the Securities and Exchange Commission document shows, AMD did indeed make some compromises in favor of Intel, especially with regard to conduct.

EC still holds Intel accountable even after AMD settlement

Though the future of relations between AMD and Intel may be peaceful now, the EC believes Intel may still owe restitution for its past conduct.

Boxee's first official hardware to premiere December 7

Boxee's elegant freeware multimedia manager software will soon have its own hardware

Bing vs. Google rematch on video search

After Microsoft folds some old MSN Video features back into Bing, do they add to the search engine's functionality or take away?