Remember that access to your email account is likely to be worth a lot more to the crooks than your Zoom account would be, for the important reason that your email account is probably the way you go about doing password resets for many of your other accounts. Presumably they’re hoping that if you notice this “hint”, you might use the password to your email account instead of your Zoom password. The phishers probably don’t care what password you enter as long as it’s a valid one they can use on one of your accounts, but you’ll notice they’ve put the suggestion text Email Address Password into the password field instead of just Password as you see on Zoom’s page. TLS certificate used by the phishing site in sample 1 above.įor comparison, here’s the real Zoom login page to match up with the phoney page above: To remind you how quickly the crooks move once they’re ready to run a scam, note that the encryption certificate for this website was issed yesterday, not long before the spam that connected to it was sent. However, you do end up on an HTTPS (padlock showing) web page, as you would expect, and the login page is almost pixel perfect:įake “Zoom” login page displayed if you click the “Live Meeting” link in the email. …but if you click it you don’t end up on, as you might expect. Screenshot of phishing content showing bogus “Live Meeting” button. ![]() To native speakers of English, the wording in both these examples is rather unnatural, and there’s a spelling mistake ( perfomance) that you probably wouldn’t expect.īut the implications of the message are clear enough: if you miss this meeting, which is happening right now, you won’t get to fight your corner to keep your job.Īs you can imagine, there’s a Zoom-like button to join you to the meeting… The subject lines, message layout and meeting descriptions vary slightly, but the basic idea is the same. H.R and Audit Head will start in few minutes. This is a reminder that your zoom meeting appointment with Hello your bbbbb.example CEO and Management Board Meeting Subject: Please join Zoom meeting in progress Meeting Purpose: Contract Suspension / Termination Trial -sample 2. Required to commence this Q1 perfomance review meeting Your presence is crucial to this meeting and equally ![]() Human Resources and Payroll Administrative Head will start This is a reminder that your scheduled zoom meeting with Hello Reminder with yyyyy.example Team on Zoom! Subject: You are invited to join the q2 meeting SophosLabs sent us several examples of spam messages received in the last few days that said, rather worryingly: Scammers have turned to employment worries as their latest lure for Zoom phishing scams.
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |