{"id":88,"date":"2025-05-16T01:48:32","date_gmt":"2025-05-16T01:48:32","guid":{"rendered":"https:\/\/rjsecure.com\/?p=88"},"modified":"2025-05-22T18:24:34","modified_gmt":"2025-05-22T18:24:34","slug":"phishing-awareness-spotting-and-stopping-email-scams","status":"publish","type":"post","link":"https:\/\/rjsecure.com\/?p=88","title":{"rendered":"Phishing Awareness: Spotting and Stopping Email Scams"},"content":{"rendered":"\n

What is Phishing?<\/h3>\n\n\n\n

Phishing is the fraudulent practice of sending emails or other messages pretending to be from reputable companies in order to induce individuals to reveal personal information, such as passwords and credit card numbers. These can come in many forms, in addition to email, such as SMS phishing through text message, voice phishing through voice calls.<\/p>\n\n\n\n

The three types of phishing campaigns are blanket phishing to try to get the lowest hanging fruit, then there is spear phishing which targets a specific individual or group of individuals, for example, targeting an organization by doing reconnaissance on them. Then there is a type of phishing that is a bit more critical, targeting executives in a company to try to gain privileged information, for example targeting a CFO or Chief Financial Officer to gain payment information for fraud.<\/p>\n\n\n\n

Example Phishing email impersonating PayPal<\/h3>\n\n\n\n
\"\"<\/figure>\n\n\n\n

As you can see, there are many indicators of a phishing attempt<\/p>\n\n\n\n

The email shows it is from Team Support, possibly PayPal support however it points to a malicious email address not affiliated with PayPal
The greeting is pretty generalistic as well as it has some grammatical errors in the text, legitimate emails would target the customer more instead of a general header
It tries to get you to click on the link to confirm your account information
Which will most likely redirect to their malicious website to have you log in and collect your credentials
If you did click on the link, and put in your credentials, it would most likely fail and then redirect to the legitimate paypal site but the damage would have been done and attacker has gotten the credentials<\/p>\n\n\n\n

Example of an SMS phishing attempt<\/h3>\n\n\n\n
\"\"<\/figure>\n\n\n\n

As you can see with this, this is a phishing text message impersonating USPS. The indicators of this are:<\/p>\n\n\n\n

    \n
  • the email address ending with a foreign top level domain (.ru) – \n
      \n
    • This seems to be a throwaway email address using a malicious domain that the link might redirect to.<\/li>\n<\/ul>\n<\/li>\n\n\n\n
    • There is also a spoofing USPS link, the official website for USPS is www.usps.com but this one says usps.com-packagesrpr.vip so this is a .vip top level domain not a com<\/li>\n<\/ul>\n\n\n\n

      Phishing Prevention<\/h3>\n\n\n\n

      There are many ways to prevent phishing attempts from compromising your account or organization:<\/p>\n\n\n\n

        \n
      • Set up Multi-Factor authentication -> This would require a second method to be inputted upon login so if an attacker DOES get your credentials to log in, they won\u2019t know the Multi-Factor\/MFA code. This should be phishing resistant such as a Authenticator App, Push Notification a pass key or a security key.<\/li>\n\n\n\n
      • Never click any links in an email from an untrusted source\n
          \n
        • Recommended would even go further and never click a link or open an attachment until you reach out to the recipient directly to confirm what was sent to prevent known-user spoofing.<\/li>\n<\/ul>\n<\/li>\n\n\n\n
        • For an enterprise, using an email security solution will prevent most of the phishing messages from getting to the users in the first place. \n
            \n
          • Most home-based providers like Gmail, Yahoo, or Outlook have similar functionality to help prevent phishing emails from getting into your inbox.<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n\n\n\n

            Below is an insightful phishing awareness video that also explains how to spot a phish and how to avoid being caught in the threat actors net.<\/p>\n\n\n\n

            \n