You've likely seen this phishing attempt subject line or one of its variations:
Are you available for a quick task?
Got a minute?
Are you here?
Are you in the office?
Can you help me?
These emails typically appear to come from your manager or company president, are brief and project urgency. They all want to start a conversation to play out their ruse.
Scam Indicators
The sender's name is accurate, but the actual email address is not a company email.
Doesn't your boss have your cell?
Urgency - Hurry up and respond because I'm your boss and this needs to be done ASAP.
The signature block may not be the one you are used to seeing. However, the slightly more sophisticated cyber-criminals may cut and paste the spoofed sender's actual signature block.
The Con Explained The scammer wants to trick you into responding without thinking. They express that it's urgent, they need it right away, it is critical. They switch you over to texting because they are "in a meeting," which continues to show urgency.
They'll next ask you to rush out and purchase gift cards from Amazon, Apple, Visa, or whatever, then text the numbers over right away.
This type of phishing attempt seldom contains any malicious payloads, but on occasion may include a link to an online form requesting your email address and password.
Your Defense
Slow down, think it through. If it seems strange to you, it probably is.
Contact the purported sender with information directly from your contacts, call her cell, or walk over to her office.
Don't respond to the original email, or if you get as far as texting, to that number.
In the spectrum of phishing emails, this is a low-budget attack. If they send out enough, someone will bite and the cyber thieves will have earned their pay. Don't become a victim.
Slingshot Information System provides multiple layers of cyber security protections from firewalls and email filtering, to web filtering and end point detection and response services. Contact us today to schedule a free network assessment. Let Slingshot be your North Shore Technical Support resource.
Comments