Extremely good Phishing scam emails

[Stupoty]

Hello,

I help a guy with his I.T. stuff at a fabrication/structural steel place.

There have been a couple of very good password phishing emails , the thing that makes them good is that they start as an email inquiring about a job and asking if it's something we do , they after you reply they send an email with links to the plans via a dropbox or onedrive or google docs (probably other file services too).

The links are to a fake login that tries to get you to enter your credentials.

They are very well written and very focused to the work sector the company operate in.

Anyone else had anything like this ?

edit - When i respond and say "i'm having an issue with your link can you please attach them directly" they don't email back.

Stuart

 

[MetalMonkey]

Very unusual to have anything that specific and targeted.
I have seen something similar only once before in a different sector, and concluded that it was most likely a scam run by somebody who used to work in that area, as the terminology was far too specific for the average scammer to have known about.

Usually they actually prefer to send out the obvious phishing emails as only the more gullible tend to fall for them so they already know they are onto a dead certainty with anybody who does actually respond.

 

[Stupoty]

Very unusual to have anything that specific and targeted.
I have seen something similar only once before in a different sector, and concluded that it was most likely a scam run by somebody who used to work in that area, as the terminology was far too specific for the average scammer to have known about.

Usually they actually prefer to send out the obvious phishing emails as only the more gullible tend to fall for them so they already know they are onto a dead certainty with anybody who does actually respond.

Yeah it's the targeted nature of it that was alarming , it's a quite high effort email scam.

Quite a lot of spam arrives , mostly on the "ow we accidentally transferred $2.5m to your account can you send it back via western union please"

Stu

 

[Moose McAlpine]

When i respond and say "i'm having an issue with your link can you please attach them directly" they don't email back.

Yeah, sorry, i'm out of the office at the moment.

If you send me your e-mail, login and password i'll put the files directly onto your computer for you.

 

[OJCar]

Yes, we have had similar phishing e-mails, very well written and well focused on our organisation, similarly wanting the receiver to log into a data transfer site.
Unfortunately for them we have all the data transfer sites bar one blocked by our Security system ( and access to that site is strictly controlled ).

 

[Stupoty]

Yes, we have had similar phishing e-mails, very well written and well focused on our organisation, similarly wanting the receiver to log into a data transfer site.
Unfortunately for them we have all the data transfer sites bar one blocked by our Security system ( and access to that site is strictly controlled ).

The block thing is interesting as the links seem to be to hijacked sub domains of random websites, where they were imitating the login pages.

Stu

 

[OJCar]

The block thing is interesting as the links seem to be to hijacked sub domains of random websites, where they were imitating the login pages.

Stu

I'm not about to discuss specifics of our security system on the internet.

But back in the days I did firewalls the first rule you put on the firewall was the Deny All Rule ...

 

[Stupoty]

I'm not about to discuss specifics of our security system on the internet.

But back in the days I did firewalls the first rule you put on the firewall was the Deny All Rule ...

That's how the office phone is set up

 

[Moose McAlpine]

That's how the office phone is set up

And the biscuit tin!

 

[bricol]

We get enough specifically targeted emails to have training on spotting them - certainly not uncommon.

 

[m_c]

Some are quite cunning, but there are plenty people around who will click on links and/or open attachments without checking details.

I worked beside somebody who opened a random attachment the week after we all done our annual phishing training.
His excuse, "It showed as coming from x in HQ"

At least our IT department were on the ball, and our manager had a call within minutes to ensure the infected tablet was switched off.

 

[bricol]

That's the thing - people just don't think.
I simply ignore anything I'm not expecting - much to the annoyance of our european senior manages who seem to send me ever increasing dire consequences if I don't complete some internal on-line survey/course/time-wasting exercise some clown in an office thought up to justify their job . . .

 

[Kerelise]

Is this a scam? On monday, got an email from eBay - the usual ones that come along after you've been browsing saying "the seller is accepting offers". Except the one I got was on an Audi bumper (I don't have an Audi...). Got one today from Karpet Kingdom, thanking me for my review (I haven't bought any carpet since 20 yrs ago, and not from KK). No suspicious puchases made on ebay (i.e. by anyone hacking my account). Unsure if maybe something about me has been cloned somewhere?