Spam about "Website availability"
A common strategy used by hackers is to identify the company hosting your website or email services and then craft a targeted phishing email impersonating that company. Because the email appears to come from a legitimate service provider, it may look trustworthy at first glance.
For example, if your email service is hosted by BlueHost, you might receive an email that appears to come from BlueHost. However, upon carefully examining the links, you may discover that the message is actually a phishing attempt designed to trick you into clicking a malicious link.
Never click links in suspicious emails, even if they appear to come from a legitimate company.
Here is an example of a phishing email impersonating BlueHost:
I can also make the wording more technical and suitable for a cybersecurity awareness presentation.
Spam related to "Cloud Storage Renewal"
A typical attacker uses scare tactics and impersonates an agency, hoping that you will make a mistake and reveal your password to the scammer. A typical phishing email may look like this, with a scary " Permanent data loss warning"
Emails mimicking legitimate trusted companies
Emails designed to steal your credentials can be sophisticated and technically convincing, often mimicking legitimate communications from trusted companies. Below is an example of a phishing attack that impersonates Ledger, a hardware wallet provider, and attempts to create a sense of urgency to persuade recipients to click on a malicious link. Warning signs to look for are:
- Suspicious sender address: The email claims to be from Ledger, but the sender's domain (evan.demosume.net) does not appear to be an official Ledger domain.
- Urgent language: Phrases such as “Action Required Immediately” and a strict deadline pressure recipients to act without verifying the message.
- Suspicious links: The links point to share.google rather than an official Ledger website. Always verify the destination before clicking.
- Technical-sounding claims: References to a “critical issue” and a “security firmware update” make the message sound credible, even though the claims may be fabricated.
- Impersonation of a trusted brand: The email uses Ledger's name and includes a company address and copyright notice to appear legitimate.
Remember: Never click links or follow instructions in unexpected security emails without independently verifying their authenticity. If you use a Ledger hardware wallet, visit the official Ledger website by entering its address directly into your browser. Never enter your wallet's recovery phrase into a website or share it with anyone.
Example of "Cloud Services Disabled" emails
A typical attach to steal your password may look as in this email. Do not replay or click any link. It is an attempt to scare you and still your password.
Emails with the subject: Action Required Immediately: Security Firmware Update
One example of phishing attack involves the name "coinbase", as the attacker assume that the receiver of such emails has account in Coinbase. The most recent examples of such emails look like this. Do not click. Ignore, as it comes from foreverbambu.com.
Example of password expiration phishing email
Spammers often try to gain access to your user account so they can blackmail you. Below is an example of a typical phishing email designed to steal your password. Never reply to such emails or share your login credentials.
Example of "account verification alert"
To steal your password, attackers may send an email like the example below. Note that the email may appear to come from your own domain, which can make it seem legitimate and cause confusion. If you receive a suspicious email like this, delete it immediately and do not click any links.
While legitimate services occasionally send security alerts, most unsolicited account verification notices are phishing scams designed to steal your login credentials or personal information.
Example of a phishing email:
Your email password expires in 14 days
An unexpected email saying “Your email password expires in 14 days” could be a phishing attack. Do not click on such emails. Watch for these warning signs:
- Unknown sender.: The email comes from an unfamiliar address or a domain.
- Unexpected password expiration: You weren't expecting a password change.
- Suspicious links: The email asks you to click a button such as Keep My Password or Update Password.
- Urgent language: It pressures you to act quickly to avoid losing access to your account.
- Requests for credentials: It asks you to enter your email password after clicking a link.
- Unexpected attachments: It includes files you weren't expecting, especially executable files.