[AusNOG] spear phishing attack

[Bradley Amm]

We get these on a daily basis
Examples are someone pretending to the be MD emailing the Finance Manger
asking for a payment to be sent through. They make their display name the
same as the manager and cant do much about that.They get the details for
example from Social media

We have told our users to double check the email address and ask for
approval verbally from the person.


[image: image.png]



On Mon, Feb 4, 2019 at 8:42 AM Scott Wilson <siridar at gmail.com> wrote:

> Morning all,
>
> Just got my first ever "live" spear phishing attack - an email slipped
> through purporting to be from our MD to our CFO, asking for a $14k invoice
> to be paid. They've named an australian BSB and account #, so I'm curious
> as to what the attack vector is - is that bank account compromised? Do they
> rely on a bounceback after a few days and then follow up with "oh,
> actually, that should have gone via western union..." or is there something
> more sophisticated at work?
> _______________________________________________
> AusNOG mailing list
> AusNOG at lists.ausnog.net
> http://lists.ausnog.net/mailman/listinfo/ausnog
>


-- 
Bradley Amm
0420 501 801
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.ausnog.net/pipermail/ausnog/attachments/20190204/4ebebae2/attachment.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image.png
Type: image/png
Size: 19268 bytes
Desc: not available
URL: <http://lists.ausnog.net/pipermail/ausnog/attachments/20190204/4ebebae2/attachment.png>