I don’t do much traveling by air –but maybe pass it on..

Subject: ALERT! re US-CERT Current Activity - Airline E-ticket Email Attack

The following information was just received from GSA regarding an e-ticket email scam. Link to the actual report on the US-CERT website is provided below.

Airline E-ticket Email Attack

US-CERT is aware of public reports indicating that a new email attack is circulating. This attack uses email messages that appear to be from legitimate airlines and contain information about a bogus e-ticket. These email messages instruct the user to open the attachment to obtain the e-ticket. If a user opens this attachment, a file may be executed to infect the user's system with malicious code.

Reports, including a posting by Sophos <http://www.sophos.com/security/blog/.../1604.html> , indicate that these messages have the following characteristics. Please note that these attributes may change at any time.



* The subject line "E-Ticket#XXXXXXXXXX"

* An attachment named "eTicket#XXXX.zip"



http://www.us-cert.gov/current...ttack


Rick