NOVEMBER 1, 2013
Your regular source of security updates from TrendLabsSM
In This Issue

Security Spotlight
Halloween Ushers in Ghastly Scams

Security for Home Users
Online Security for You and Your Family

Security for Business
Protect Your Corporate Network against Targeted Attacks

Security Spotlight

Halloween Ushers in Ghastly Scams

While survey scam lures change, the end result remains the same—stolen information.”

Halloween is a season of fun, candies, and costumes. However, we spotted several scams that take advantage of the celebration to victimize users. If you're not too careful, you could end up with more threats than treats this year.

Halloween Freebies Online

We saw several scams that use "free Halloween candy" as bait. We encountered two suspicious Twitter accounts promising free candy to users who click a particular link. The link, of course, leads to survey scams.

We also spotted one on Facebook. Like the Twitter scam, the suspicious Facebook page advertises a "free candy" that leads to a survey scam site.

Another suspicious link, this time advertising a free gift card for Halloween costumes, was on a YouTube video. Just like the two scams, this one leads users to a survey scam site.

Survey Scams and Your Data

Survey scams are a threat because they ask for your personal information. With details like your full name, email address, and phone number, cybercriminals can build your online persona, steal your identity, and hack into your accounts. Survey scams use different kinds of bait, like gift cards, Instagram followers, and even free apps. While the lures change, the end result remains the same—stolen information.

Survey scams might seem simple, but the fact that bad guys still use them implies that there are people who still fall for this tactic. These scams are just one of the threats plaguing users. Cybercriminals often use social engineering to convince you to visit unknown pages and answer forms. While online deals are common, it's always better to scrutinize each one before giving out your information. Some scams even use the name of popular brands or stores, so you should always double-check if a promo is legitimate.

You should also check for a site's legitimacy and safety. Some indications of site security include the HTTPS protocol and a padlock icon located somewhere within the browser. You can also use the Trend Micro Site Safety Center.

Copyright ©2013 Trend Micro Incorporated. All rights reserved. Trend Micro and the Trend Micro t-ball logo are trademarks or registered trademarks of Trend Micro Incorporated. All other company and/or product names may be trademarks or registered trademarks of their respective owners. The information contained in this document is subject to change without prior notice.