Beware! "New Security Features" Scam Email Phishes for Credentials
Our investigation of the "New Security Features" email has revealed that it is a phishing scam.
The message claims that the recipient must update their account or else it will be unusable and deleted after a certain deadline. When we clicked on the link provided, we were taken to a website that mimicked the recipient's email sign-in page, but was actually designed to collect and steal their login credentials.
The consequences of this scam go beyond just stealing mail accounts. Cyber criminals can use stolen communication accounts to ask contacts for loans, promote scams, or even spread malware by sharing malicious files/links under the guise of the account owner. Similarly, finance-related accounts can be used to make unauthorized transactions and online purchases.
It is important to remain vigilant when receiving emails from unknown sources as they may contain malicious links or attachments. It is also advisable to enable two-factor authentication for all online accounts in order to protect them from unauthorized access.
Furthermore, users should regularly check their bank statements and credit reports for any suspicious activity and report any discrepancies immediately. Additionally, they should avoid clicking on links sent via email and instead navigate directly to the website in question. Finally, they should never provide personal or financial information unless they are certain that the website is secure.
Table of Contents
The full text of the “New Security Features” email scam
The complete text of the email used in the scam reads as follows:
Dear (victim name),
We recently installed new security features for all the and admin centers.
We require our customers to check and update their account information.
You will not be able to use your account if this process is not completed.
Please update your account information below.
Update Information
If no action is taken, Account will be automatically deleted after 1/25/2023 7:57:23 p.m.
This Email was sent to "victim email" as a User from " "Thanks,
Mail Admin.
How can you tell an email concerning your account is a scam, similar to the “New Security Features” scam?
When receiving an email concerning your account, it is important to be vigilant and look out for any suspicious activity. If the email contains a link or attachment, it is best to avoid clicking on it as it could be malicious. Additionally, if the email requests personal or financial information, it is likely a scam. Legitimate companies will never ask for such information via email.
It is also important to check the sender's address and make sure that it matches the company's official website address. If there are any discrepancies, then the message should be treated with caution. Furthermore, users should always be wary of emails with urgent deadlines or threats of account deletion as these are common tactics used by scammers to pressure victims into taking action quickly without thinking twice.
Finally, users should enable two-factor authentication for all online accounts in order to protect them from unauthorized access. This adds an extra layer of security and makes it more difficult for cyber criminals to gain access to accounts even if they have stolen login credentials.
How can you tell a fake phishing login form from a real one?
When attempting to log into an online account, it is important to be able to tell the difference between a fake phishing login form and a legitimate one. One way to do this is by looking at the URL of the website. If it does not match the official website address, then it is likely a scam. Additionally, users should pay attention to any spelling or grammar mistakes in the text as these are often indicators of a fake form.
Furthermore, users should always check for any suspicious links or attachments that may be included in the form. These could be malicious and should never be clicked on. Finally, users should look out for any requests for personal or financial information as legitimate websites will never ask for such information via email or login forms. If any of these signs are present, then it is best to avoid entering any information and contact the company directly instead.
