Warning: Don’t fall for fake CAPTCHAs
Most people don’t think twice about CAPTCHAs. And that’s being exploited. There’s a new twist on something you see every day. It’s catching people out in a way that only shows up later…
Video
Ask yourself:
- Are you expecting this email?
- Have you dealt with this person/company before?
- Do you feel unsure about this email?
A targeted attack could make use of available information to make the email/invoice appear to be from a legitimate supplier, using their branding, display name and a similar looking email address. An attacker can find information from published lists, portfolios & case studies, reconnaissance via phone or email enquires, or based off of another attack where data was extracted.
What Happens If You Click The Link?
You are directed to a sign in page to access the document which is a fake login screen designed to steal your credentials and use them to access your systems & accounts.
What About Attachments & Downloads?
An attachment such as a PDF or Word document can contain bad code which runs when you open the document and can infect your computer with malware to steal information, ransom your files or spread itself to others while awaiting further commands.
What to do if you Get an Email That is Suspicious?
If the email looks real but you have doubts contact them via a known phone number or contact us for a sense check at support@westwayit.co.uk or call 01452 491080
Managing Director, Westway IT
John is the founder of Westway IT and works directly with small businesses across Gloucestershire to keep their IT secure, productive and stress-free.
With a BSc in Computer Science and hands-on experience supporting businesses from 1 to 40 users, he specialises in cyber security, Microsoft 365 and business automation.
An award-winning MSP owner and active member of the global IT community (including GTIA), John focuses on solving real business problems, not just technical ones.
Published: 17 March 2019 | Last Updated: 17 March 2019
