Emails to be avoided... by Sponsor Alchemy

Emails to be avoided... by Sponsor Alchemy

Alchemy group logo 

You know from our previous articles about phishing and spearphishing attacks and how staff are a firm’s weakest links. This time we’re detailing the different types of emails that might appear in your inbox – emails that can look genuine but which could well be from a cyber criminal; emails designed to infect your systems, hold your firm to ransom, prevent your business from operating (think WannaCry) and severely damage your reputation.

 

Emails to be wary of

  • An email that purports to be regarding a completion certification. In a recent phishing simulation exercise this type of email was sent to all staff in a large firm. Within 48 hours 10 people had clicked on the link, some had replied and several staff provided their username and password.

  • An email with links to Google Drive – this could look quite genuine if you’re expecting documents from a client. A variation on the same theme is the email that requests help on a legal matter (and who doesn’t want to assist a prospective client?) with a relevant file available in Dropbox.

  • An email containing scanned documents from a photocopier. This is a good one – invariably works like a charm in law firms where numerous documents are being scanned throughout the working week.

  • Emails with fake invoices – another winner in firms that purchase a lot of items. A variation are emails with fake receipts from Amazon - click the link if you don’t recognise the purchase and want to know more about your supposed order.

  • How about a fax from the government digital fax service which can appear legitimate because it includes the logo. A logo is not a sign that the fax is from a genuine source.

  • Then there are emails from banks requesting account codes. Non-accounts staff often fall for this one.

  • An email from Microsoft advising of unusual sign in activity on your 365 account. Have you had one of those? We get them all the time. Ignore them! And how about warnings from Microsoft that you have xx pending emails in quarantine. 

Tempting to sort the problem out isn’t it? After all you don’t want to miss a crucial email from a client or prospective client or from a QC that you’re waiting to hear from. These might be genuine but proceed with caution.

  • Emails warning that your inbox is full and your email account will be suspended unless you clean up your inbox. Yes, let’s click on that link and get the overcrowded inbox cleaned up!

  • Then there are the emails telling you your password is expiring – time to choose a new one.

    And that’s just some of the possibilities!

    When did YOU last click on a link or respond to an email that maybe… wasn’t genuine?

    And the solution is?

  • check the source of the email
  • check for typos, dodgy grammar and syntax
  • if in doubt do nothing but report the matter straight away to the person tasked with cyber security – better safe than sorry.
  • never send login details
  • never send bank account details
  • include information on dubious emails in internal newsletters to staff and suppliers
  • provide regular staff awareness training
  • regularly perform phishing simulations to check on how vigilant your staff are and then feedback to them

Does your firm provide cyber awareness training?

Alchemy Systems have 20 years of IT systems experience and are a Microsoft Partner. Alchemy Systems Designs, Supplies, Installs, Supports and Protects clients’ IT systems. The legal sector has always been a strategic focus. Our staff are experienced in the specific needs and challenges of law firms from service desk to strategy to protection and also provide cyber awareness training.

 

Tel. 0330-043-0801                  

email. info@alchemysys.co.uk

 www.alchemysys.co.uk


Like   Back to Top   Seen 625 times   Liked 0 times
Subscribe to Updates And Join Over 1.2K Subscribers Today!

Subscribe to:
x

Subscribe to Updates

If you enjoyed this, why not subscribe to free email updates and join over 1274 subscribers today!

Subscribe to updates



Subscribe to:

Alternatively, you can subscribe via RSS RSS

‹ Return to

All email subscriptions must be confirmed to comply with GDPR.

I've already subscribed / don't show me this again