Did you randomly send a CD? Don’t put it in your computer say the cops


A woman in Maine received a CD in the mail encouraging them to watch and share, but they did not put it on their computer, the Buxton Police Department said.

Buxton Police Department Facebook

While CDs are not as common as they once were in today’s digital world, if you receive one randomly in the mail, don’t put it on your computer or elsewhere, authorities say. .

If you find a mailing envelope from an unrecognized sender and discover one, it is likely a ruse, Maine police warned.

“Please don’t let your curiosity get the better of you, instead throw the CD away immediately,” the Buxton Police Department said in a Dec. 2 press release. Buxton is approximately 70 miles south of Augusta, the state capital.

A local woman received a letter to “a friend” from “a friend” on Dec. 1, the department said.

When she opened it, she found a CD with a hand-written message saying “Please watch, copy and share with friends,” according to a photo shared by police.

She “used common sense and did not put this CD in her computer,” police noted.

They warned that “Information gathered from an ongoing list of scams indicates that this CD was likely loaded with malware and other programs that can infect a computer and allow hackers to access and steal personal informations”.

Although Buxton Police said they did not receive similar calls regarding other CDs when the woman reported it, they suspect that other people may have received a CD at random or that they still can.

The department “will work with the state’s criminal lab to safely determine what is actually on the drive,” spokesperson Tammy Jo Gerard told McClatchy News in a statement.

“We would like to remind everyone to be vigilant against potential scams,” they added.

“Keep your computer anti-virus and malware up to date, don’t put any media in your system unless it’s from a trusted source, and be on the lookout for phishing and scam emails.” . ”

It happened before

In 2018, Brian Krebs, security expert and former Washington Post reporter, who runs a KrebsOnSecurity site covering “in-depth security information and investigations,” alerted the public to “malware-laden CDs.”

Many state and local government agencies have reported receiving mail containing CDs loaded with malware “apparently sent from China,” according to its July 27, 2018 post.

“This particular ruse, while crude and simplistic, attacks the curiosity of recipients who may be tricked into inserting the CD into a computer,” Krebs wrote.

A non-public alert was sent to government agencies at the local and state levels by the Multi-State Information Sharing and Analysis Center regarding the scam, he said.

The CD “arrives in an envelope stamped in Chinese and includes a” typed letter with confusing terms with occasional Chinese characters. ” “

“Attacks like this are a reminder that cybercrime can take many forms,” he wrote.

Ahead of Thanksgiving and Christmas, the FBI and the U.S. Cyber ​​and Infrastructure Security Agency urged the public to remain “vigilant against the myriad techniques used by cybercriminals to gain access to networks,” in a Nov. 22 press release.

“Recent history tells us that this could be a time when these persistent cyberactors halfway around the world are looking for ways – big and small – to disrupt critical networks and systems owned by organizations, businesses and critical infrastructure. “

This story was originally published 2 December 2021 6:38 pm.

Julia Marnin is a McClatchy National Real-Time reporter covering the Southeast and Northeast while based in New York City. She is a College of New Jersey alumnus and joined McClatchy in 2021. Previously, she wrote for Newsweek, Modern Luxury, Gannett and more.

Jack L. Goldstein