Alert
Close

Earn Double Rewards Points: Take the AARP Social Security True/False Quiz

Scam Alert

Scam Email Targets Sudoku Players

Decades-old trick 'does a number' on puzzle fans

En español | Beware, Sudoku fans: You may receive an email that promises you can get free, unlimited puzzles with a simple click on a keyword. In fact it's the latest way to install identity-stealing "malware" on your computer — but using a decades-old trick.

A new scam email lures players with the promise of free puzzles, then installs malware after asking players to enable macros in Excel.

A new scam email lures players with the promise of free puzzles, then installs malware after asking players to enable macros in Excel. — Getty Images

These emails, discovered recently by online security firm Sophos, promise to automatically generate the popular puzzles if you open an attached Microsoft Excel spreadsheet. If you do that, you then get a message that you need to "enable macros." Macros are little programs that, in their benign form, let you tell your computer to carry out a lengthy sequence of keystrokes or mouse actions.

But if you follow the prompt, warn Sophos experts and the Better Business Bureau, you'll also unknowingly disable your security software and install malware that collects sensitive information from your computer — including passwords — to send to a remotely based scammer.

Back in the 1990s, scammers frequently used macros to stealthily install malware. But Microsoft largely neutralized that threat by changing all its software so that the default setting was to disable macros. The Sudoku email, under the guise of being helpful, gives you instructions for how to restore your computer's ability to run macros.

Today, certain legitimate files may ask you to enable macros, but that should be done only if you fully trust the source. The Sudoku email obviously doesn't meet that standard (nor do other attachments in unsolicited emails or questionable websites making such requests).

So delete the Sudoku email without opening the spreadsheet, and instead feed your habit for the number puzzles at this AARP page.

Prefer other types of online games and puzzles? Beware of any that require you to provide your cellphone number under the guise of texting you results. That's another old trick to secretly charge you for new services or hit you with bothersome "robocalls."

Sid Kirchheimer is the author of Scam-Proof Your Life (AARP Books/Sterling). He writes the Scam Alert column for AARP.

Also of Interest

Visit the AARP home page every day for great deals and for tips on keeping healthy and sharp

Topic Alerts

You can get weekly email alerts on the topics below. Just click “Follow.”

Manage Alerts

Processing

Please wait...

progress bar, please wait

Video Extra

Identity Theft: Now even the dead aren't safe. Learn how to keep thieves from stealing a deceased loved one's name and personal information.

Tell Us WhatYou Think

Please leave your comment below.

The Cheap Life

Jeff Yeager Cheap Life Ultimate Cheapskate AARP YouTube web series save money

Catch the latest episode of The Cheap Life starring Jeff Yeager, AARP's Ultimate Cheapskate. Watch

Discounts & Benefits

From companies that meet the high standards of service and quality set by AARP.

Life insurance: you are covered rain or shine

Exclusive annuities for members from AARP Lifetime Income Program from New York Life.

AARP Credit card from Chase

Members can get cash back rewards on purchases with the AARP® Credit Card from Chase.

Homeowners Insurance
Member Benefits

Join or renew today! AARP members receive exclusive member benefits & affect social change.