Secure Florida offers...

  • Security Alerts
  • C-Safe Classes
  • News and Info

create an account

Email
Password
Forgot your password?

News

FBI Alert: Federal Employees Targeted by Phishing Scam

Published February 21, 2014

Once again, participants in the Thrift Savings Plan (TSP) are being phished for personal information.

The TSP is a retirement savings plan for more than 3 million employees and members of the military. In response to a similar phishing email in 2006, Thrift Savings Plan administrators stated that they would never request personal or financial information via e-mail.  Tom Trabucco, director of external affairs for the Federal Retirement Thrift Investment Board, said "Do not respond to unsolicited e-mail, and never give out information of a personal nature (through) unsolicited e-mails." 

From the FBI Alert (weblinks disabled by brackets):

The Enterprise Security Operations Center (ESOC) received a tipper regarding phishing emails purporting to be from Thrift Saving Plan (TSP) administration being sent to TSP customers.  The email itself attempts to appear legitimate by mimicking @tspgov[.]us address from “Account Service” and sets the subject heading to “Thrift Savings Plan Alert: Passcode Reset”.  The email informs user(s) about a change made to their TSP account.  It then instructs users to click on a fake link to verify the changes.  This email is a phishing attempt to obtain your personal information and the link(s) provided SHOULD NOT be visited.  The sender email address and the malicious link have been blocked by ESOC upon receiving the notifications.

ESOC’s recommendations:

  • If you receive this phishing email in your inbox, please contact your local FBI office. Afterward, please promptly delete the email from your “Inbox" and “Deleted Items” folder, or follow the instruction given by the FBI.
  • In the event that you received the email and clicked on the link BUT did not provide your personal information, please perform a malware scan you your computer.
  • In the event that you clicked on the link and provided your personal information, please contact TSP and have your password changed immediately.

E-mail details

 
From: accountservices@tspgov[.]us [mailto:accountservices@tspgov[.]us]
Sent: Tuesday, February 11, 2014 7:34 AM
To: undisclosed-recipients
Subject: Thrift Savings Plan Alert: Passcode Reset
Importance: High
 
Security Checkpoint:
You last accessed your Thrift Savings Plan account on 02/09/2014.
Remember: Always look for your SiteKey before entering your TSP Account Number.
Your Online TSP Passcode was reset on 02/09/2014.
This Alert relates to changes that occurred to your TSP Account. Please visit hxxp://www[.]tspgov[.]us/ to verify changes to you account.
Your security is important to us. If you are unaware of this change, please contact us immediately: ThriftLine — 1-TSP-YOU-FRST
TSP Account Services
ThriftLine — 1-TSP-YOU-FRST
hxxp://www[.]tspgov[.]us/
© 2014 Thrift Savings Plan

RSS Feed | FAQ | Alert Archive | About Us | Contact Us | Report a Crime
© SecureFlorida.org
FDLE