The United States military has enough hardship without malware attacks. A new Phishing Attack is circulating which seeks to Steal Money and Identity Information from United States military members and their families.
Specifically, the phishing scam is aimed at the more than seven million members of USAA. USAA--which stands for United Services Automobile Association--is a Fortune 500 financial services company which has expanded well beyond the scope of a simple automobile association. USAA provides banking, investments, and insurance for current and former military members and their families.
One thing that is unique about this phishing attack, aside from specifically targeting American military members, is that the victim is directed to a spoofed USAA Web site rather than simply being redirected to the real site once the credentials are captured.
That is why this particular threat seems both silly--from the standpoint that most military families won't really have much in the way of assets to steal, and heinous--from the standpoint that those serving in the United States military, and their families, already put up with enough hardship without also being targeted by a phishing attack.
With this attack, as with all Malware Phishing Scams, users need to be aware that reputable companies and financial institutions might e-mail an alert message, but will not include a File Attachment or Link within the Message. Never open any file attachment or click on any link in an e-mail such as this no matter how credible it looks.
If you receive an alert like this in your e-mail, and you are concerned that it could be legitimate, close the e-mail and type in the URL to connect with the organization yourself to ensure you aren't being redirected to a malicious page. Better yet, pick up the phone and call customer service to verify whether or not there is a real issue with your account.