'Measures To Strengthen Server Security' Email Scam Uses Old Bait
After examining the email entitled "Incoming Mails Have Been Restricted," our investigation found that it is a type of spam called phishing. Its purpose is to trick recipients into giving away their email account login credentials. This fraudulent email claims that messages could not be delivered to the recipient's inbox and that their email account will be deactivated unless they update or verify it.
The email with the subject "Warning!! Email Deactivation-2023 Update Required" declares that nine incoming messages could not be delivered because the email server requires verification or an update. It then pressures the recipient to take immediate action to avoid deactivating their email account.
However, as previously noted, this email is fake, and all its assertions are fraudulent. Therefore, when we clicked the "Verify" button, we were directed to a phishing website that appears similar to the recipient's email account sign-in page. The fake webpage falsely states that the session has expired and requires the recipient to log in again to their account.
The login information (email address and password) entered on this site will be exposed to the scammers. They can then use the compromised email accounts to potentially steal the content registered through them. To give an example, they could use finance-related accounts (for example online banking, money transferring, e-commerce, digital wallets and so on) to make unauthorized transactions and online purchases.
In addition, they can steal social account owners' identities (e.g., emails, social networking/media, messengers, etc.) and request loans or donations from their contacts/friends, promote scams, and spread malware by sharing malicious files/links.
What Are the Top Four Signs that an Unsolicited Email is a Scam?
Here are four signs that an unsolicited email may be a scam:
Urgency: The email may create a sense of urgency or panic, pressuring you to act immediately without taking time to think or investigate further.
Request for personal information: The email may ask you to provide personal or financial information, such as passwords, bank account details, social security number, or other sensitive information.
Poor grammar and spelling: Scammers often make spelling and grammar mistakes, which can be a sign that the email is not legitimate.
Suspicious links or attachments: The email may contain links to unknown or suspicious websites, or attachments that could contain viruses or other malware.
