Bad scammer

[Marauder2003]

Got an email today saying my invoice for Norton was ready. Don’t use Norton. The idiot scammer made one mistake. He use CC instead of BCC. So 80 people saw the same invoice and the email addresses of the other 79 people that got it. 😊

QATRSDH.png

[SactoDoug]

They have been using that phishing email for a while. There are many variations. The basic premise is to make someone think they are being charged for something they did not buy. In order to stop the charge, the email provides a link where you have to enter your information to cancel the transaction.

[ibanezfoo]

Its pretty common. I get them all the time for car parts, industrial pumps, etc. They have my name in there but none of the other info is accurate.

They are getting pretty clever. We had one the other day where a person clicked on the link and it was able to steal their cached session data and then immediately tried to use it. Didnt even need them to put in their login info. It would have worked if our IDS didn't catch it.

We had another that happened with a perfect storm. Someone had clicked on one of those and of course it spammed out to everyone in their contact list. Well, one of the people in their contact list was due in a meeting with that person in about 5 minutes about a new project we're spinning up and the document said something about a proposal so naturally the recipient clicked the attachment. We had already killed it at the server level so nothing happened but everything aligned with the right people, right subject, and right timing to where it seemed perfectly legit.

Stay diligent.