Lunar Eclipse Email Attack

US-CERT is aware of an email attack circulating that is related to the recent lunar eclipse.  The email contains a message indicating that there is a video of  the lunar eclipse available and instructs users to follow a link to download the video.  If a user clicks on this link, an executable file will be downloaded that contains a Trojan program. This Trojan program may allow an attacker to take control of an affected system.

US-CERT encourages users to take the following preventative measures to mitigate the security risks:

• Install anti-virus software and keep virus signatures up-to-date.
• Do not follow unsolicited links.
• Refer to the Recognizing and Avoiding Email Scams document for more information on avoiding email scams.
• Refer to the Avoiding Social Engineering and Phishing Attacks document for more information on social engineering attacks.