To content

New wave of phishing emails

The mails supposedly come from the management of your workgroup and are fake.

We are currently observing a phishing wave in which the name of your supervisor is used as the sender. Only the plain name, which can be freely selected in mails, contains the name of the leader of the workgroup, which the attackers automatically retrieve from the website of your workgroup and write specifically to the employees of the group. The real sender e-mail addresses are based at freemailers such as mail.ru or gmail.com.

The subject line is currently "Available?" or "Urgent request," and the content asks, for example, "When you get a minute, could you please drop an email" to get in touch.

Unfortunately, such phishing attempts directed at a person cannot always be detected automatically. However, the scam is already known: First, there is always this contact request without any malicious content. Only when the victim responds is there often a request to purchase vouchers on behalf of the alleged supervisor. In such a case, it is always better to ask the alleged sender via a channel independent of e-mail, e.g. by telephone, and in the event of fraud to inform the SIC of the ITMC via info.sictu-dortmundde.