AI Assistant
Notifications
Clear all

Western Regional Survey Conference suspicious e-mail

6 Posts
5 Users
0 Reactions
363 Views
dave-karoly
(@dave-karoly)
Posts: 11990
Member
Topic starter
Translate
English
Spanish
French
German
Italian
Portuguese
Russian
Chinese
Japanese
Korean
Arabic
Hindi
Dutch
Polish
Turkish
Vietnamese
Thai
Swedish
Danish
Finnish
Norwegian
Czech
Hungarian
Romanian
Greek
Hebrew
Indonesian
Malay
Ukrainian
Bulgarian
Croatian
Slovak
Slovenian
Serbian
Lithuanian
Latvian
Estonian
 

I received a conference confirmation e-mail although I didn't register for the conference.

The e-mail is suspicious.?ÿ Hovering over the links reveals suspicious links.

Someone who actually registered is more likely to follow the links, for me it was immediately suspicious per all of our extensive security training.


 
Posted : January 23, 2018 8:13 am
MightyMoe
(@mightymoe)
Posts: 10534
Member
Translate
English
Spanish
French
German
Italian
Portuguese
Russian
Chinese
Japanese
Korean
Arabic
Hindi
Dutch
Polish
Turkish
Vietnamese
Thai
Swedish
Danish
Finnish
Norwegian
Czech
Hungarian
Romanian
Greek
Hebrew
Indonesian
Malay
Ukrainian
Bulgarian
Croatian
Slovak
Slovenian
Serbian
Lithuanian
Latvian
Estonian
 

If you have one, I would get my IT guy to look at it ASAP. Sounds fishy


 
Posted : January 23, 2018 8:26 am
Gene Kooper
(@gene-kooper)
Posts: 1336
Member
Translate
English
Spanish
French
German
Italian
Portuguese
Russian
Chinese
Japanese
Korean
Arabic
Hindi
Dutch
Polish
Turkish
Vietnamese
Thai
Swedish
Danish
Finnish
Norwegian
Czech
Hungarian
Romanian
Greek
Hebrew
Indonesian
Malay
Ukrainian
Bulgarian
Croatian
Slovak
Slovenian
Serbian
Lithuanian
Latvian
Estonian
 

Dave,

I got one of those too, yesterday.?ÿ The tell was that it only included my email address.?ÿ I'm going to the conference and the registration link doesn't match the one from the WFPS web site.?ÿ I left a message with the conference organizers in case it is a phishing expedition.

I'd suggest that others go to www.plseducation.org to register.


 
Posted : January 23, 2018 10:39 am
ross-kinnie
(@ross-kinnie)
Posts: 21
Member
Translate
English
Spanish
French
German
Italian
Portuguese
Russian
Chinese
Japanese
Korean
Arabic
Hindi
Dutch
Polish
Turkish
Vietnamese
Thai
Swedish
Danish
Finnish
Norwegian
Czech
Hungarian
Romanian
Greek
Hebrew
Indonesian
Malay
Ukrainian
Bulgarian
Croatian
Slovak
Slovenian
Serbian
Lithuanian
Latvian
Estonian
 

I forwarded a copy to the conference staff with my concerns - I had looked at the site, but have not made the decision to go yet

I agree, it was a very good design and hard to figure out


 
Posted : January 23, 2018 10:43 am
dave-karoly
(@dave-karoly)
Posts: 11990
Member
Topic starter
Translate
English
Spanish
French
German
Italian
Portuguese
Russian
Chinese
Japanese
Korean
Arabic
Hindi
Dutch
Polish
Turkish
Vietnamese
Thai
Swedish
Danish
Finnish
Norwegian
Czech
Hungarian
Romanian
Greek
Hebrew
Indonesian
Malay
Ukrainian
Bulgarian
Croatian
Slovak
Slovenian
Serbian
Lithuanian
Latvian
Estonian
 

Got an apology e-mail today although that could be fake too, who knows.

The design of their e-mail, even if legitimate, fits several of the red flags commonly disseminated?ÿ in security training, things to look for.

For example, hovering over the legitimate looking link in the e-mail ( https://www.surveymonkey.com/r/WesternRegionalConference) shows a lengthy URL which is not the same, this is a red flag commonly pointed to in security training.?ÿ With all the spoofing going on we are directed to view links in e-mails with heightened suspicion.


 
Posted : January 23, 2018 12:59 pm

a-harris
(@a-harris)
Posts: 8759
Member
Translate
English
Spanish
French
German
Italian
Portuguese
Russian
Chinese
Japanese
Korean
Arabic
Hindi
Dutch
Polish
Turkish
Vietnamese
Thai
Swedish
Danish
Finnish
Norwegian
Czech
Hungarian
Romanian
Greek
Hebrew
Indonesian
Malay
Ukrainian
Bulgarian
Croatian
Slovak
Slovenian
Serbian
Lithuanian
Latvian
Estonian
 

I forward suspicious emails to these guys.

FTC Suspicious Email

[email protected]


 
Posted : January 23, 2018 4:01 pm