Are You Expecting a Special Invitation?



Businessman pressing messaging type of modern icons with virtual backgroundAccording to MailGuard, a few days ago an email from our Prime Minister Scott Morrison started to do the rounds.  

To the unsuspecting recipients, an email from the domain ’@pm.gov.au’ seems legitimate as does the sender ‘Hon Scott Morrison MP’. Of course, it's not actually from him but how would you know?

Here is the email screenshot:

No alt text provided for this image

Hackers will use any means necessary to illegally obtain your personal information or breach your organisation and wreak havoc. The email subject reads ’Here’s your download’ (not very PM like at all and the email message itself includes the obligatory photo of Scott Morrison, the heading of ‘Invitation from the Prime Minister of Australia’ a hyperlink named ’Invitation Letter.pdf’ that takes the curious clicker to a well-branded phishing site. 

In hindsight, the red flags in the email are clear.

  • Fake domain (@pm.gov.au is not real)
  • Odd subject line not conducive to the sender
  • Hovering over the .pdf hyperlink in the email will confirm it is indeed a trap

I'm sure most of us would take the opportunity to accept an invitation from our PM - regardless of our political views. This is exactly what the bad guys want us to do. 

Examples like this, aimed fair and square at your people to lure them in to click on something they shouldn't and unwillingly hand over their personal data or in a moment of curiosity give the keys to your kingdom away to hackers. 

The answer my friends is new-school security awareness training which ensures your employees receive up-to-date knowledge on the current threat landscape facing your organisation and industry. 

Tools and Tips

  • If (and when) you receive a suspicious email, report it straight away to your IT help desk to ensure it is properly investigated. Try not to do the knee jerk delete as your cyber pros will want to have a good look at it.
  • Here is a great resource from about email red flags in our resource section you can share far and wide.

Check out Jacqueline's post on LinkedIn


Free Phishing Security Test

Would your users fall for convincing phishing attacks? Take the first step now and find out before bad actors do. Plus, see how you stack up against your peers with phishing Industry Benchmarks. The Phish-prone percentage is usually higher than you expect and is great ammo to get budget.

PST ResultsHere's how it works:

  • Immediately start your test for up to 100 users (no need to talk to anyone)
  • Select from 20+ languages and customize the phishing test template based on your environment
  • Choose the landing page your users see after they click
  • Show users which red flags they missed, or a 404 page
  • Get a PDF emailed to you in 24 hours with your Phish-prone % and charts to share with management
  • See how your organization compares to others in your industry

Go Phishing Now!

PS: Don't like to click on redirected buttons? Cut & Paste this link in your browser:

https://www.knowbe4.com/phishing-security-test-offer



Subscribe to Our Blog


Comprehensive Anti-Phishing Guide




Get the latest about social engineering

Subscribe to CyberheistNews