You know from our previous articles about phishing and spearphishing attacks and how staff are a firm’s weakest links. This time we’re detailing the different types of emails that might appear in your inbox – emails that can look genuine but which could well be from a cyber criminal; emails designed to infect your systems, hold your firm to ransom, prevent your business from operating (think WannaCry) and severely damage your reputation.
Emails to be wary of
An email that purports to be regarding a completion certification. In a recent phishing simulation exercise this type of email was sent to all staff in a large firm. Within 48 hours 10 people had clicked on the link, some had replied and several staff provided their username and password.
An email with links to Google Drive – this could look quite genuine if you’re expecting documents from a client. A variation on the same theme is the email that requests help on a legal matter (and who doesn’t want to assist a prospective client?) with a relevant file available in Dropbox.
An email containing scanned documents from a photocopier. This is a good one – invariably works like a charm in law firms where numerous documents are being scanned throughout the working week.
Emails with fake invoices – another winner in firms that purchase a lot of items. A variation are emails with fake receipts from Amazon - click the link if you don’t recognise the purchase and want to know more about your supposed order.
How about a fax from the government digital fax service which can appear legitimate because it includes the logo. A logo is not a sign that the fax is from a genuine source.
Then there are emails from banks requesting account codes. Non-accounts staff often fall for this one.
Tempting to sort the problem out isn’t it? After all you don’t want to miss a crucial email from a client or prospective client or from a QC that you’re waiting to hear from. These might be genuine but proceed with caution.
Emails warning that your inbox is full and your email account will be suspended unless you clean up your inbox. Yes, let’s click on that link and get the overcrowded inbox cleaned up!
Then there are the emails telling you your password is expiring – time to choose a new one.
And that’s just some of the possibilities!
When did YOU last click on a link or respond to an email that maybe… wasn’t genuine?
And the solution is?
Does your firm provide cyber awareness training?
Alchemy Systems have 20 years of IT systems experience and are a Microsoft Partner. Alchemy Systems Designs, Supplies, Installs, Supports and Protects clients’ IT systems. The legal sector has always been a strategic focus. Our staff are experienced in the specific needs and challenges of law firms from service desk to strategy to protection and also provide cyber awareness training.
Tel. 0330-043-0801
email. info@alchemysys.co.uk