We have all received those blatant phishing emails that are so badly constructed they can’t be real. But, these emails are getting more devious… as one of our customers recently found out.
Our customer was targeted by a prevalent Office 365 phishing email. An employee from their company had been conversing back and forth with an outside IT company. He, therefore, thought nothing of receiving an email from this IT company entitled ‘Secure Message.’ Because of a prior connection with the IT company, this email didn’t arrive in his spam folder.
He clicked on a link within this email and it took him to a fake Office 265 login page.
As soon as he entered his username and password, his email account was compromised. Soon, the account began sending spam messages to other colleagues, who also clicked the link. Disaster! Our CTO at CUE received one of these subsequent emails. Our customer service team realized this was a spam attack and contacted the company who sent the email. For our CTO, these were the three warning signs:
- The email was sent at 5am, a suspicious time for this customer.
- It was an email we didn’t expect to receive from our customer.
- The link didn’t look right, it didn’t lead to a Microsoft Domain.
So, always be on alert and think about the emails you are opening, even from people you know.
How can you protect yourself?
- Understand the different types of threats out there
- Hover over the link within the email to check the domain it will send you to — make sure it is a secure company domain
- Incorrect branding: sometimes these phishing emails may look slightly off to you. Big companies know their stuff and if the branding doesn’t feel familiar, trust that!
- The email is trying to scare you into taking action with messages like ‘your account is expiring.’
If you find yourself a victim of phishing, change your password immediately. We also highly recommend a tool like Webroot to check if there is any malware on your computer.
Right now, CUE Marketplace is offering a free trial plus a 20% lifetime discount of Webroot and other cybersecurity software.
Want to understand more about the difference between adware and malware? THIS blog is for you.
Visit the CUE marketplace of software solutions to find tools that will save you time when running your business. CUE only recommends products we believe will add value to our readers. For some links in this post, CUE may receive an affiliate commission.