Scam targets IOTA accounts.

If you receive a random email saying your IOTA account has "insufficient funds," don't click on the attachment. It's a scam.

John Kinas, IT director for the District of Columbia Bar, reported that on October 7 the D.C. Bar's filtering systems detected and blocked numerous email messages addressed to employees bearing a forged service@citibank.com return address.

The messages allege that the recipient's Interest on Lawyers Trust Account (IOLTA) has insufficient funds to pay an outstanding check and includes a .zip file attachment purportedly containing additional information that is presumed to contain malware.

"There is a strong possibility that these messages are part of a broader phishing attack targeted to legal professionals," said Kinas, adding the email headers indicate the messages were sent from several different email servers scattered across the globe.

Jane Curran, executive director of The Florida Bar Foundation--which oversees Florida's IOTA program--said payees of checks written on IOTA accounts would not email any state bar, IOLTA program, or trust account holder with such a request.

"Even...