Phishing Email: NY Attorney General
A recent report issued by the Attorney General Eric T. Schneiderman reveals that hackers have targeted attorneys in New York posing as representatives of his office. The contents of the email claim that their business was the subject of complaint for which they have 10 days to reply. A hyperlink to the “complaint” is embedded in the email where the malicious software is present. Once the hyperlink is clicked, malware is downloaded onto the person’s computer.
Here is an example of the email below.
From: The Office of The State Attorney <firstname.lastname@example.org>
Date: Wed, Nov 30, 2016 at 10:37 AM
Subject: The Office of The State Attorney Complaint
To: Bar Member
Dear Bar Member:
A complaint has been filed against your Business.
Enclosed is a copy of the complaint which requires your response. You have 10 days to file a rebuttal if you so desire.
You may view the complaint at the link below.
Rebuttals should not exceed 15 pages and may refer to any additional documents or exhibits that are available on request.
The Office of The State Attorney cannot render legal advice nor can The Office of The State Attorney represent individuals or intervene on their behalf in any civil or criminal matter.
Please review the enclosed complaint. If filing a rebuttal please do so during the specified time frame.
The Office of The State Attorney
Helpful Tips to Avoid a Cyber Breach
Don’t Let Your Guard Down
No matter who the email is coming from, do not let your guard down. Hackers have the ability to masquerade emails to appear as legitimate entities and use social engineering tactics to entice their readers into clicking on rogue attachments or hyperlinks.
Call the Source
If you are in anyway suspicious of an email, just call the source of the email to confirm it’s validity.
If you do identify an email as a phishing attempt, make sure to report it! You can report phishing emails to your internet service provider or the Federal Trade Commission at www.ftc.gov.
Get covered by a full cloud-based service. A FCBS are a well informed, full and comprehensive service with research and development departments. A FCBS handles all incoming emails to your company with cutting edge CEO fraud algorithms, phishing censors, URL scanners, ransomware detection and threat intelligence. A full cloud-based service allows you to focus comfortably on your companies interests without any worries of a cyber breach.