Spear-Phishing Attack Uses Fake Subpoenas To Steal From CEOs

iDefense estimates that the attack went out to about 15,000 to 20,000 executives, resulting in about 1,800 confirmed malware victims.

The SANS Internet Storm Center on Monday warned that CEOs of some companies are being targeted with a phishing attack involving fake federal subpoenas sent via e-mail.

"We’ve gotten a few reports that some CEOs have received what purports to be a federal subpoena via e-mail ordering their testimony in a case," said John Bambenek, a security researcher at the University of Illinois at Urbana-Champaign and Internet Storm Center handler, in an online post. "It then asks them to click a link and download the case history and associated information. One problem: It’s totally bogus."

By Thomas Claburn
InformationWeek

Full Story: http://www.informationweek.com/news/security/attacks/showArticle.jhtml;jsessionid=C5PI4DLE2YZMUQSNDLOSKHSCJUNN2JVN?articleID=207200849&_requestid=914105