The United States CERT (Computer Emergency Readiness Team) warns members of the public to be on alert for scams targeting Japan’s earthquake and tsunami disasters. They expect the scale of the tragedy to be an irresistible magnet for lowlife scumbags trying to steal from those who want to help – by creating spam with malicious links and fake appeals for donations.
Email scams may contain links or attachments which may direct users to phishing or malware-laden websites. Fake antivirus attacks may come in the form of pop-ups which flash security warnings and ask the user for credit card information. Phishing emails and websites requesting donations for bogus for charitable organizations commonly appear after these types of natural disasters.
Software security company Sophos has an example of a spam email containing a bogus appeal for donations.
The email pretends to come from the British Red Cross, using the subject line “Japan Tsunami Appeal | British Red Cross” and what appears to be a legitimate British Red Cross email address.
But it asks you to send money – via MoneyBookers – to a rather shady-looking personal Yahoo email address.
Scam email from someone pretending to collect donations for the British Red Cross.
If you want to support the relief efforts, here are some legitimate organizations accepting online donations: American Red Cross, Mercy Corps, Save the Children, Japan Society, The Central Community Chest of Japan (choose a prefecture to donate to in the upper right side of the page; Iwate, Miyagi or Fukushima are recommended), globalgiving.
