There was a story this past week in the New York Times that tells of a new phishing attack aimed at corporate senior executives. The phish, according to the Times, appears "to be official subpoenas from the United States District Court in San Diego. Each message includes the executive’s name, company and phone number, and commands the recipient to appear before a grand jury in a civil case."
Phish has been emailed to thousands of executives across the country and contains a link purporting to be a copy of the full subpoena, which if clicked on, installs keystroke recording and remote control software. According to the story, less than 40% of percent of commercial antivirus programs were able to recognize and intercept the attack.
