You must be used to the news of all kinds of Gmail email scams through phishing attacks or bait attacks. Unfortunately, there is no escape! Only way to save your money is to be informed and be active while avoiding falling victim to cyber attacks. However, it is not easy and these cybercriminals keep coming up with clever ways to lure Gmail and other email services users and then trick them into parting with their money. Now, a new wave of dangerous messages via email have been released that have the potential to lead your personal information to land in the hands of hackers.
With the upcoming Christmas and New Year international events, the presence of users on the internet is increasing day by day. Even the recent Black Friday sale season boosted internet usage to another height. It has led to cyber fraudsters becoming even more active on the internet trying to cash in with phishing messages. The misleading messages claim to be coming from well-known courier companies promising to deliver parcels to users.
Avanan, the email security solution provider, reported that starting in November 2021, it has observed a new information harvesting attack where attackers spoofed an undelivered package notification from DHL or such trusted delivery brands hoping to trick the users to click on a link. Though, the link is basically a trap to get your credentials. How fake mail looks like? The email starts off by stating that a parcel is "undelivered" from DHL. It further urges users to register the address, as well as other information, online to ensure that the package arrives on time and in the correct location. Which is not going to happen ever. Avanan mentioned that in this email attack, fraudsters have used the technique of brand impersonation, where they have used the name of trusted brands such as DHL. Another important point to be noted is that DHL delivers around the globe which makes the spoof more believable.
To convince end-users to click, the hackers are using the classic social engineering strategy of urgency. In the hope that when end-users will learn that their product will not deliver on time, they would panic and enter their information without giving a second thought. How to identify fake mail? There are always loopholes in every phishing email or message. In this case, users can note that the sender won't use the personal name as the email will start with the word "Hello", which should ring alarm bells in your head as it signifies that the message is not particularly for you but sent to more than one person. Additionally, you won't find the particular mention of the region from where DHL is delivering the package. Again, this shows that the email is sent to many other users.
During the festive season or emails, pay close attention to emails coming from delivery or e-retail websites. Check the URL closely, if this looks like any other URL that you have clicked earlier from the official website of the delivery company or not. Also, ensure that package number for your product is mentioned, which will show the true information about the delivery of the package.