Jonathan Richards
Pick up your copy of Love: Forever Changes at WHSmith today
Corporate bosses have become the latest target of cyber-criminals, after a string of attacks in which senior management have been singled out to receive fraudulent e-mails.
Internet fraudsters have taken to sending personally addressed e-mails to chief executives and other high-level executives with a view to installing malicious software on computers that have access to the most privileged company information.
In the latest e-mail scam, known as "whaling" because it targets "the big fish", executives are sent official documents — for instance, court subpoenas — that apparently relate to the business of senior management.
The employees singled out are typically "C-level", meaning chief financial officers, chief technology and information officers, as well as those in other sensitive parts of the company, such as accounts.
The hope is that recipients will click on a link in the e-mail which directs them to a website that installs a malicious programme on their machine.
Criminals can then gain access to highly sensitive company secrets, such as financial details, news of impending product releases, results of recent research and other information that may enable them to make money on the stock market.
Among the firms known to have been targeted by the scam, which is a variation on well-known phishing e-mails that have hit banks, are those in the arms and energy industries.
In the case of sensitive industries such as defence, those responsible for sending the e-mails may include not only cyber-criminals but foreign governments, experts said.
"You never really expect to see that scenario, which is straight out of Hollywood fiction, but in the case of weapons companies, there probably is some espionage element," Mary Landesman, a senior researcher at ScanSafe, the security firm, said.
In the latest example, chief executives at more than a hundred companies based in the San Fransisco area were sent a personally addressed e-mail commanding them to appear before a grand jury in a district court.
The e-mail specified the date and time of the court appearance, contained reference to specific "Federal Rules of Civil Procedure", and was written in apparently convincing legal language, including expressions such as "this subpoena shall remain in effect until you are granted leave to depart by the court or by an officer on behalf of the court".
The correspondence was also configured so that it came from an address that ended in 'cacd-uscourts.com', a quite close approximation to the typical internet domain for American courts — courtname.uscourts.gov.
Whaling e-mails have for the most part targeted US executives, but security experts said that the scam would almost certainly "jump the pond" and warned senior management in the City to be vigilant.
"If you're an executive in a FTSE 100 company in a sensitive industry, then you need to be very cautious about e-mail and understand that you're a target," Ms Landesman said.
In some cases the e-mails have also made reference to known family members of the executive, gleaned for instance from social networking sites, where members will often post information about what their friends or relatives do for a living.
"Networking sites are starting to play a big role in online scams," Guy Bunker, chief scientist at Symantec, another security firm, said.
"It's on those sites that criminals are learning, for instance, that so-and-so works in accounts at such-and-such a company."
"Social engineering", the practice by which criminals exploit human curiosity to gain access to information — for instance by pretending they are an employee at a company — is an area of increasing focus for the security industry and was a big theme at the InfoSec conference in London this week.
Greg Day, a security analyst for McAfee, the antivirus company, said: "As we spend more and more time on the internet, our digital fingerprint is simply getting bigger and bigger, and that makes for greater opportunities for people to gather information about us."
Explore your passion for food with the delights of Thai, Indian & Chinese cooking
In our new series, Tony Hawks takes a dry, wry look at modern life - junk mail, interminable meetings and snooty sales assistants
Read the training tips and advice that helped our London Triathletes
Read our exclusive 100 Years of Fleming and Bond interactive timeline, packed with original Times articles and reviews
The latest travel news plus the best hotels and gadgets for business travellers
Shortcuts to help you find sections and articles
2007
£30,000
2006
£14,337
2008
£39,937
Great car insurance deals online
c.£75,000
GlosFirstmeansbusiness
Gloucestershire
c. £90,000 + PRP
Essex County Council
Essex
£
Not Specified
The Bar Standards Board
London
Competitive Package
Npower
West Midlands
1 & 2 Bed apartments
From £249,995
Great Investment, River Views
Great Dubai Investment Opportunities
from £89,950
low-cost ownership homes in London
Multi–Centre 9 Nights
From only £925pp
View thousands of properties online with your Vacation Rental People
£POA
List your property with two leading travel websites
£POA
Great travel insurance deals online
Contact our advertising team for advertising and sponsorship in Times Online, The Times and The Sunday Times. Globrix Property Search - find property for sale and rent in the UK. Milkround Job Search - for graduate careers in the UK. Visit our classified services and find jobs, used cars, property or holidays. Use our dating service, read our births, marriages and deaths announcements, or place your advertisement.
Copyright 2008 Times Newspapers Ltd.
This service is provided on Times Newspapers' standard Terms and Conditions. Please read our Privacy Policy.To inquire about a licence to reproduce material from Times Online, The Times or The Sunday Times, click here.This website is published by a member of the News International Group. News International Limited, 1 Virginia St, London E98 1XY, is the holding company for the News International group and is registered in England No 81701. VAT number GB 243 8054 69.