Imagine this scenario: You’re going about your day, casually checking your emails, when suddenly you come across a message from a company you trust. Naturally, you think, “Great! That’s safe to read.” But hold on just a minute… this email isn’t quite what it appears to be.
It’s actually part of yet another scam orchestrated by cyber criminals, designed to deceive you into clicking on malicious links or divulging sensitive information. It’s called “SubdoMailing,” and it poses a significant threat.
So, what’s the deal with SubdoMailing?
Similar to conventional phishing attacks, cyber criminals impersonate trusted brands. However, here’s the twist: these criminals scour the internet for subdomains of reputable companies. You know, those additional segments in a web address that precede the main domain? For instance, consider “experience.trustedbrand.com.” The “experience” part is the subdomain.
They locate a subdomain that the brand is no longer using but is still linked to an external domain that’s no longer registered. Then, they purchase the domain and set up a fraudulent website.
Thus, when you think you’re clicking on “experience.trustedbrand.com,” you’re unknowingly redirected to “scamwebsite.com.”
These criminals are dispatching approximately five million deceptive emails daily, targeting individuals in businesses just like yours. And because these emails appear to originate from a legitimate source, they often bypass standard security checks and land directly in your inbox.
Here’s our advice to ensure your safety and protect your data:
Remain cautious of any emails that seem even remotely suspicious. If something appears fishy, it likely is. Before clicking on any links or downloading attachments, take a moment to verify the sender. Watch out for red flags such as spelling errors or unfamiliar email addresses.
Ensure your employees are well-versed in the latest phishing tactics and can recognize a scam. A little knowledge can go a long way in safeguarding your company. Consider investing in high-quality security software to fend off cyber criminals. While it may entail an additional expense, trust us, it’s a worthwhile investment. As always, if you require assistance with this or any other aspect of your email security, don’t hesitate to reach out. We’re here to help.