WyzGuys Tech Talk

Friday Phish Fry

Phishing Email Alerts

Catch of the Day: Malicious Link Phish
Chef’s Special: Evil Proxy Phish
Also serving: Domain Registration Phish

Examples of clever phish that made it past my spam filters and into my inbox. Some are sent by clients or readers like you, and other reliable sources on the Internet.

You can send phishing samples to me at phish@wyzguys.com.

My intention is to provide a warning and show current examples of phishing scams, related articles, and education about how these scams and exploits work, and how to detect them in your inbox. If the pictures are too small or extend off the page, double clicking the image will display them in a photo viewer app.

Malicious Link Phish

This email just looks like a random email from someone I night know. I decided to check the link, since it was encoded. See my earlier article on encoding

I check out the link with Virustotal

And then tried to visit the site, but was blocked by Firefox security.

The point is to be on guard against this type of email.

New EvilProxy Phishing Attack Uses Indeed.com Redirector to Target US Executives

Microsoft, the Dark Web and the name John Malkovich all factor into this EvilProxy phishing attack. The good news is there are steps IT can take to mitigate this security threat.

A new EvilProxy phishing attack is leveraging an open redirection flaw from the legitimate Indeed.com job search site, according to a report from Menlo Security, a cloud-based security company. Menlo Security notes this phishing attack campaign targets C-suite employees and other key executives at U.S.-based organizations primarily in manufacturing, insurance, banking and financial services, property management and real estate. More…

Fake Domain Registration Phish

This is a scam that is technically legal. It is a solicitation to change domain registrars from the one you are using to this company. GoDaddy and other legitimate registrars charge about $20 per year. These guys want $289. Definitely too much money, but not illegal.

Be Sociable, Share!

13
OCT

About the Author:

I am a cybersecurity and IT instructor, cybersecurity analyst, pen-tester, trainer, and speaker. I am an owner of the WyzCo Group Inc. In addition to consulting on security products and services, I also conduct security audits, compliance audits, vulnerability assessments and penetration tests. I also teach Cybersecurity Awareness Training classes. I work as an information technology and cybersecurity instructor for several training and certification organizations. I have worked in corporate, military, government, and workforce development training environments I am a frequent speaker at professional conferences such as the Minnesota Bloggers Conference, Secure360 Security Conference in 2016, 2017, 2018, 2019, the (ISC)2 World Congress 2016, and the ISSA International Conference 2017, and many local community organizations, including Chambers of Commerce, SCORE, and several school districts. I have been blogging on cybersecurity since 2006 at http://wyzguyscybersecurity.com

Add a Comment

This site uses Akismet to reduce spam. Learn how your comment data is processed.