Friday Phish Fry

Phishing Email Alerts

Catch of the Day: Undeliverable Email Phish
Chef’s Special: Employment Scam Phish

Examples of clever phish that made it past my spam filters and into my inbox. Some are sent by clients or readers like you, and other reliable sources on the Internet.

You can send phishing samples to me at phish@wyzguys.com.

My intention is to provide a warning and show current examples of phishing scams, related articles, and education about how these scams and exploits work, and how to detect them in your inbox. If the pictures are too small or extend off the page, double clicking the image will display them in a photo viewer app.


System Administrator Appreciation Day
July 29, 2022 – 23rd Annual

Your network is secure, your computer is up and running, and your printer is jam-free. Why? Because you’ve got an awesome sysadmin (or maybe a whole IT department) keeping your business up and running. So say IT loud; say IT proud …

Happy SysAdmin Day!


Undeliverable Email Phish

Another credential stealer.

Here’s the email

The REACTIVATE ACCOUNT HERE button resolved to https://storageapi.fleek.co/580f2b0a-48bc-41ff-bb4f-9ec9d3ecc546-bucket/index.html#?email=support@wyzguys.com.

Here’s the landing page.  I’ve seen more than my share of these simple but evidently effective phishing exploits.

 


Both Job Seekers and Employers Should Be Aware of New Sophisticated Employment Scams

By Roger A. Grimes.

With record low unemployment, a tight labor market, and increasing customer demand, everyone says it is an employee’s job market out there. But it is getting tougher to get a real job and to hire a good employee these days.

An increase in social engineering attacks offering fake jobs and fake employees is making it harder for both potential employees and employers to know who to trust. Job seekers are being offered fake jobs solely to steal their money or they are utilized as unwitting pawns to compromise their existing employers; and employers are being exploited by fake employees who want to steal intellectual property, secrets and value.

Fraudulent jobs and employees are becoming something all job hunters and employers need to worry about. If you are looking for a job, do you know how to spot a fake job? If you are an employer, do you know how to detect a fake employee? This article will offer some suggestions to both potential employees and employers.

Roger covers the following need-to-know topics:

  • Fake Job Offers
  • Insert Trojan Horse Programs
  • Compromise Your Existing Employer
  • Company Employment Threats
  • Defenses for job seekers and for companies trying to hire people

CONTINUED:
https://blog.knowbe4.com/job-seekers-and-employers-beware


 

0

About the Author:

I am a cybersecurity and IT instructor, cybersecurity analyst, pen-tester, trainer, and speaker. I am an owner of the WyzCo Group Inc. In addition to consulting on security products and services, I also conduct security audits, compliance audits, vulnerability assessments and penetration tests. I also teach Cybersecurity Awareness Training classes. I work as an information technology and cybersecurity instructor for several training and certification organizations. I have worked in corporate, military, government, and workforce development training environments I am a frequent speaker at professional conferences such as the Minnesota Bloggers Conference, Secure360 Security Conference in 2016, 2017, 2018, 2019, the (ISC)2 World Congress 2016, and the ISSA International Conference 2017, and many local community organizations, including Chambers of Commerce, SCORE, and several school districts. I have been blogging on cybersecurity since 2006 at http://wyzguyscybersecurity.com

Add a Comment


This site uses Akismet to reduce spam. Learn how your comment data is processed.