Greetings all,

Here is the latest FRAUD ALERT that we have received at our Home Office and are passing on to you. This announcement will be up, forum wide, for just a few days and then will be taken down. So please take note and pass the word around.

The following email is being sent around AND IS A FRAUD:

===================================================

The Title of the email is "Verify Your AKO Account", and it looks like this:

-----Original Message-----
From: AKO SUPPORT TEAM [mailto:ako.techteam@army.mil]
Sent: Thursday, October 09, 2008 4:46 AM
Subject: **Verify Your AKO Account**

We are currently upgrading our system. To verify your AKO account, you
must reply to this email immediately and provide the information below:

Name:
Address:
User Name:
Password:
Phone number:
Postion:

Failure to do this will immediately render your AKO account deactivated
from our database.

You can also confirm your email address by logging into your AKO account
at https://webmail.us.army.mil/
Thank you for using AKO WEBMAIL
WEBMAIL SUPPORT TEAM.

=========================================

Although the "From" email address is ako.techteam@army.mil, when you hit "Reply," it goes to info.techsupport@info.lt

Very sneaky...

More about the Fraud Alert..

Some may not realize how important your password to a DoD system is..

With it, someone can not only access all of your personal information stored on that system, but also because webmail is an IMAP based SSO authentication system - an attacker could gain access to a potentially vulnerable IMAP email system, traverse accounts and directories, drop in worms and exploit code - and when it comes back to 'who did it' guess who's account was used and guess who the higher powers are going to come crashing down to?

There's a lot more to AKO than the web-based interface. IMAP and POP is a perfect gateway from public internet to a DoD controlled network (DMZ of course) but still can cause a lot of problems.