Social Engineering via Elder Scrolls

Stu Sjouwerman | Dec 10, 2019

ElderScrollsPhishingScammers are going after Elder Scrolls Online accounts by posing as the game’s developers and informing players that their accounts will be banned unless they hand over their credentials, BleepingComputer reports. The fraudsters convey their scam by PlayStation private messages, and that makes it difficult for the recipients to verify the legitimacy of the sender’s account. The messages state that the developers have detected unusual activity associated with the player’s account, and the player will have to provide their email address and password in order to verify their account.

“Under the current circumstances, you have 15 minutes from opening this alert to respond with the required information,” the message reads. “Failure to do so will result in an immediate Account Ban, permanently losing online access to our servers on all platforms, along with all characters associated with the account in question. Please be sure to double check your information spelling before sending.”

As is typical in phishing schemes, the scammers provide a deadline to force the victim to act before they’ve had time to research the request or gather their thoughts. Lawrence Abrams at BleepingComputer says that companies will contact you via email or through their own platform if there’s a problem with your account.

“Any messages you receive on a console's gaming service should always be suspect and ignored, especially if they ask for your password, which a company will never do,” Abrams writes.

People need to know that they should never send anyone their passwords, even if the request appears to come from a company they have an account with. New-school security awareness training can teach your employees to recognize social engineering techniques, no matter where they crop up.

BleepingComputer has the story: https://www.bleepingcomputer.com/news/security/fake-elder-scrolls-online-devs-run-playstation-phishing-scam/

Discover Your Organization’s Phish-prone™ Percentage

Ninety-one percent of data breaches begin with spear phishing. Launch our Free Phishing Security Test for up to 100 users to uncover your team's vulnerability and see how your security posture stacks up against industry benchmarks.

Get Your Free Phishing Security Test

Secure the Digital Workforce: Human + AI

KnowBe4 empowers the human and AI workforce to make safer security decisions every day. Trusted by over 70,000 organizations worldwide, we help strengthen security culture and manage risk. Our comprehensive AI-driven platform includes awareness and compliance training, cloud email security, real-time coaching, crowdsourced anti-phishing, AI Defense Agents, agent security and more. As the only global security platform of its kind, KnowBe4 provides personalized content, tools, and techniques to keep the modern workforce safe from phishing, vishing, deepfakes, and emerging threats.

Get the latest insights, trends and security news. Subscribe to CyberheistNews.