Hawk Eye

What Does an Email Fraud Attack Look Like?

🙇🏻 There are several ways to launch email fraud or Business Email Compromise attacks. Here are three top techniques attackers use:

🚨 SPOOFING EMAIL FIELDS
⚠️ Unfortunately, it’s straightforward to spoof visible email fields. And criminals leverage this vulnerability to:

📌 Change the reply-to email address in a way that makes it look like the email is coming from within the organisation;
📌 Spoof the display name;
📌 Use a lookalike domain, a domain that looks like the company’s but is slightly different;
📌 Pretend to be a legitimate business partner or supplier.

🚨 TARGETING A RANGE OF EMPLOYEES
⚠️ When scams first appeared, cybercriminals usually focused on targeting the CEO/CFO relationship. Now they target a range of corporate employees. Individual contributors and lower-level management account for about 60% of highly-targeted attacks.

🚨 GETTING CREATIVE WITH SUBJECT LINES
⚠️ Using clickbait subject lines is another favourite email fraud tactic. Urgent language is the most popular - employees are more likely to pay attention to a fraudulent reply-to address if the subject line suggests that someone in authority needs something from them.

Protect Yourself From Cybercriminals ☔️

🙆🏻‍♀️ Don’t be an easy mark for criminal activity. There’s a smart way to proactively safeguard yourself and your loved ones from the nightmare of phone hacking and stolen identity.

💁🏻‍♀️ Check out identity theft protection from HawkEye. We’ll monitor all your devices and notify you if they’re at risk and provide complete recovery services if needed.