US-CERT has seen public reports of a scam circulating via email messages that claim to be federal subpoenas. These messages request that the user follow a link to download additional information about the case. If a user clicks on this link, malicious code may be installed on the system.

US-CERT encourages users to do the following to help mitigate the risk:

• Do not follow unsolicited web links received in email messages.
• Refer to the Recognizing and Avoiding Email Scams document for more information on avoiding email scams.
• Refer to the Avoiding Social Engineering and Phishing Attacks document for more information on social engineering attacks.
• Install anti-virus software and keep virus signature files up to date.