The URL is shortened to a “lnkdin” link followed by several characters. LinkedIn automatically shortens links that are longer than 26 characters. Scammers are now using shortened LinkedIn URLs to disguise phishing links, according to Jeremy Fuchs at Avanan. Shortened LinkedIn URLs Are Now Used as Phish Hooks If you want to see how these operators work check out this YouTube video, or search YouTube for “call center scams”
Virustotal indicated the PDF file was free prom embedded malware, so I opened the attachment, and this is what I found I opened this email in Kali Linux to be on the safe side, downloaded the attachment, and then uploaded it for testing at A little spare in my opinion, but evidently it gets the job done, which is to get the recipient to open the attachment This appears to be a big trend in cyber crime groups, and that would seem to indicate that people are more credible and compliant when dealing with another human being, as opposed to a robot. This exploit relies on the skills of a call center operation, rather than a hijacked website with replica login pages and web forms. This invoice “confirms” that I spent $1500 ordering an new iPhone 13 for Edward G Walters of Larkspur California. Simialr scams may use other remote control products like Teamviewer. I looked up Ultravier in Google and clicked on he search result for “Ultraviewer Scams.” The following story and image I copied from Trustpilot. Nothing else appeared to have been changed or accessed in her computer. She was fortunate that they were only interested in the gift card. I removed Ultraviewer from Programs and Features. At this point she realized she was being scam, hung up on them, and called me. After showing here Task Manager and Event Viewer screens that “proved” she was infected with a virus, they asked her to go to the store and purchase a gift card in the amount of $600. I had a call from a client you was called by “Comcast” and before she knew it, she had given them remote access using a product called Ultraviewer. This can help prevent the worst type of security breach, the email account hijack or business email compromise (BEC). They can provide me with an email authentication service that will identify genuine IONOS emails, and fake IONOS phishing emails.ĭoes your email provider do this? If you are not sure, you should check. I received an email from my email and web host, IONOS. If the pictures are too small or extend off the page, double-clicking on them will open them up in a photo viewer app.
Please forward your email to intention is to provide a warning, examples of current phishing scams, related articles, and education about how these scams and exploits work, and how to detect them in your own inbox.
I would be delighted to accept suspicious phishing examples from you. Catch of the Day: Amazon Fake Invoice PhishĮxamples of clever phish that made it past my spam filters and into my Inbox, or from clients, or reliable sources on the Internet.