'Product Availability Confirmation' Email Scam Attempts to Steal Credentials
Upon examining the "Product Availability Confirmation" email, we discovered that it is fraudulent. The false message appears to be a pressing purchase demand from the sender and operates as a phishing scam by promoting a fake SharePoint website. This site is intended to gather and steal email account passwords.
The bogus email, titled "New Product Requirement," suggests that the recipient was referred by a former customer of theirs. It urges them to verify their product's availability instantly and provide pricing details. However, all of this information is untrue.
When we pressed the "PRODUCT CONFIRMATION" button in the email, it led us to a phishing page disguised as SharePoint. This page indicates that the files are private and safeguarded against unauthorized access. To obtain entry into these documents, scammers expect victims to enter their email credentials so that they can be supposedly linked to their email provider through a "secure IMAP channel" for authorization. Of course, this is all smoke and mirrors and part of the scam.
The cybercriminals behind this spam campaign will record and transmit any email account credentials (email address and corresponding password) entered into this website.
In addition to stealing exposed emails, criminals may exploit stolen financial accounts (such as online banking, e-commerce, digital wallets) for fraudulent transactions or online purchases. Scammers may also take over social media accounts (emails, social networking, messengers) and use them to ask contacts for loans or donations, promote scams, and spread malware through malicious links/files.
It is essential to remain cautious of suspicious emails and refrain from clicking on any unknown links. Always verify the authenticity of the email sender and carefully examine the content before taking any action. Additionally, it is recommended to use strong passwords and enable two-factor authentication on all accounts to prevent unauthorized access. Regularly updating software and antivirus programs can also help protect against potential threats.
How Can You Recognize a Scam Email in Your Inbox?
- Check the sender's email address carefully. If it looks suspicious or unfamiliar, do not open the mail.
- Be wary of emails that convey a sense of urgency, such as "urgent purchase request" or "act now."
- Look out for grammatical errors and spelling mistakes in the email content. Legitimate companies usually proofread their messages before sending them out.
- Do not click on any links in the email unless you are sure they are legitimate.
- Avoid providing personal information such as passwords, credit card details, or social security numbers in response to unsolicited emails.
- If you receive an unexpected email from a known company, verify its authenticity by contacting their customer support team directly.
- Install anti-virus software and keep it up to date to protect your inbox from malware and phishing attacks.
- Trust your gut instinct and report any suspicious emails to your IT department or relevant authority immediately.
