Should you receive a message similar to the one detailed above, please do not follow the embedded link in the message text and, instead, delete it immediately. (A "screen scrap" is a cloned image of another web site designed to fool browsers into thinking that they are on another site.) Recipient who follow the link will be taken to a compromised web site which present a "screen scrap" of the generic Microsoft Office 365 logon page. The message includes a link with the label "View File" along text claiming that the document is ready for download. The message claims to notify them of a document waiting for them on Dropbox. Though the purported sender may vary, this instance appears to come from "Drop Support" using the address dropslondon citygateconsuulting.london. Targets of this particular phishing scam will receive an email message with the Subject line "New Dropbox Message: (1) New Document Pending Your Approval". Dropbox, of course, is one of several the cloud storage and file sharing solutions. The dropbox.html landing page displays “Please wait while we prepare your files for download.CSIT has received reports of a new phishing scam which uses Dropbox as a lure. The domain varies from email to email, so just blocking that URL won’t do much. The “Verify Your Email” button goes to a malicious file called “dropbox.html” on likely a hacked website. The link downloads a javascript file (hopefully you'll never get that far).Hovering over the “click-me” button reveals a non-dropbox URL.Greeting uses part of your email address, rather than your name.
Unexpected “Verify your email” for an account you may or may not have.Regardless of how good (or not) your spam filter is, your coworkers should always be on the alert for signs that an email is spam. Nonetheless, we added some more filtering that should help block future variations when they hit. We already had filters in place from previous campaigns that blocked this new one, something SpamStopsHere does often. Several complex phrase filters are blocking it, as well as at least one content filter that's designed to block fake Cloud-based storage attacks. Our customers didn't have to do anything to stop it.
Over 1.4 million of these Dropbox Locky emails hit our filter servers, with an amazing blocking rate of over 99.9999%. Someone in a rush or not paying attention might click it. If you're looking at the email in a browser, hovering over the button reveals a suspicious URL (not ) that ends in "dropbox.html". This might trick not only people who have Dropbox accounts, but also those who don't and might wonder if a scammer signed up in their name.
Fake Dropbox Email Downloads Locky Ransomware
0 kommentar(er)
