10/10/2019
ADVISORY, CMD-CSA-19-06
A fake veteran website called "Hire Military Heroes" at the following web
address: hxxp://hiremilitaryheroes[.]com has been recently reported
attempting to take advantage of Americans who may be seeking a job,
especially military veterans. The web address is strikingly close to the
legitimate service from the US Chamber of Commerce
hxxps://www.hiringourheroes.org.
If you have visited the malicious website, it contains three links and a
desktop app. The app is a fake, and while it does show an installation
error, it actually runs successfully and conducts a check of your internet
connection to Google and downloads another program that will allows with the
scammers to access your computer. The main purpose of the additional program
is to steal your sensitive data (passwords, account numbers, etc.) and to
monitor your computer activities.
Key indicators to avoid being a victim:
• The web address (http://###.com) does not look correct, or may contain
errors. This is a sure sign that the website you are about to navigate to is
not legitimate.
• The website asks or requires you to install something (an application or
a plugin). Your computer usually is set up to ask you if this is "Ok" to
install something, because it detects the behavior as an anomaly.
• Not every result from search engines are real. Scammers will utilize
search engines (Google, Yahoo, Bing, etc.) to give out false or fake
information. Contact your counselors from the Military Family Service Center
for legitimate websites to search for jobs or IT Service Desk for other
technical questions you may have.
Find this and other important advisories under "Cybersecurity, Advisories &
Info" here: https://ngcasp16.ng.army.mil/sites/J6/
Stay vigilant and thanks for reading.
Regards,
The J6 Cybersecurity (IA) Team
(916) 854-3560, [email protected]
**Don't forget to post a print of the "Cyber Incident and Support Aid" near
your workstation**
