will the real slim shady please stand up?

Let’s talk about phishing emails and impersonation.


Hackers often use impersonation to get you to open their phishy emails. If the email is from someone you know you’re more likely to open it. For many years, Microsoft was the most impersonated company in phishing emails. It makes sense, I mean, what big business doesn’t use Microsoft?


But there’s a new winner, and it’s DHL.


In Q4 of 2021, DHL was the most impersonated company in phishing emails, thus dethroning Microsoft? Why the spike? Bad guys follow the money. Q4 means shopping, and with spikes in online shopping again last year, it only made sense that even more cherished Christmas presented would be shipped.





How does it work?

  • The attacker used a from name of ‘DHL Customer Support’
  • The Subject contains ‘DHL Shipment Confirmation…’
  • It works, because who doesn’t want to know where their package is?!


Beware, DHL wasn’t the only shipping server that’s impersonated. FedEx entered the top 10 list as well.


How can your cybersecurity awareness program benefit from this information?

  • Ensure employees know what shipping services your company uses to send packages
  • Make employees aware of these scams
  • Share sample scams and tips to employee know what to look for.


If you want to learn even more about shipping scams, check out my recent Instagram Post.


Have you seen a shipping scam? Drop a comment below.


Location: Lincoln, NE, USA

Comments

Post a Comment

Popular posts from this blog

Time is the longest distance between 2 points

Image
 "Time is the longest distance between two points."   These words by Tennessee Williams resonate deeply, considering the fragility of our memories and the challenges they pose in crucial moments. Imagine finding yourself on the witness stand, desperately grasping for recollections from the distant past. In this crucial moment, the true weight of time becomes evident.   The importance of detailed case notes cannot be overstated in legal proceedings. They are a vital link that connects our present selves with our past actions. Without them, our memories may falter, we have nothing to refresh our memory, and the quest for truth becomes an arduous struggle.   Case notes are the guardians of our actions, meticulously capturing what we did, discovered, what we found, and even what we didn't. They are the tangible records that safeguard the integrity of our recollections, preventing them from slipping away into the abyss of time.   Picture yourself in ...
Read more

How AI & Deepfakes lead to Sextortion

Image
Buckle up, and prepare yourself for the dark side of technological progress because AI is no exception to the rule. Imagine a world where scammers wield the power of AI to create mind-boggling deepfakes, exposing you in compromising situations. These sextortion scams have reached a whole new level of maliciousness. Let me shed some light on two prevalent ways these scams are executed: Picture this: someone close to you possesses naked pictures of you and shamelessly uses them to manipulate you into doing something you'd rather avoid. It's a terrifying thought, especially considering the perpetrator's familiarity with you. OR Picture receiving a random email that boldly claims to have a treasure trove of your intimate photos. Your disbelief drives you to click the link, only to realize you've fallen into a trap. As a result, your online accounts and even your beloved devices become vulnerable to compromise. I worked several sextortion cases in the FBI; some were your ave...
Read more

Here's what to do if you get catfished.

Image
  Got catfished? Do this. Break all contact. If you send them a message about ending it, they may pursue you more heavily vs. suddenly ending all contact. Report the profile on the social media platform Report them to the organization and dating site you made contact on If you lost money, report it to your local police department Report it to  https://ic3.gov
Read more