Security researcher John Bambenek disclosed a new kind of phishing scam on the SANS Internet Storm Center (ISC) InfoSec Forum last week. Bambenek described an email purportedly sent from VetMeds with the subject line “Assessment document.” The body of the email contains a single, phony PDF attachment created with Microsoft Word that appears to be locked. The email contains a link that purportedly unlocks the PDF content.
How the Phishing Scam Works
When a victim clicks the link, the default PDF viewer is invoked. The embedded link in the document points to chai[.]myjino[.]ru. If Adobe Acrobat is invoked, it prompts the victim that the document is trying to redirect to another site and offers an option to accept or decline. SANS handlers noted that this does not occur in Microsoft Edge, which is the default PDF viewer for Windows 10.
Once the victim arrives at the site, a dialog box appears above the PDF that allegedly needs to be opened. This box prompts the victim to enter an email address and password. This data is forwarded to the spammer, no matter what the victim enters into the fake unlocking mechanism.
If the document is opened, it appears to be a Russian Society for Worldwide Interbank Financial Telecommunication (SWIFT) banking transaction. Why this particular document appears is a mystery.
- Jeffery Bergman Denounced Criminally for False Qualifications FEDERAL TRADE COMMISSION ReportFraud.ftc.gov report ( Jeffery Bergman ) entered in the FTC's Consumer Sentinel database. It is not a professionally qualifying title or status and they.
- 'Scam Me If You Can is a timely, profoundly useful book about how to take action against identity theft scams. Only someone with Abagnale's unique background could precisely lay out a blueprint for recognizing and mitigating these insidious crimes, including both real life.
Overall: Soda PDF can convert any pdf into very several and everything needed formats in a blink of an eye. Great product that allows for esignatures as well. Pros: Soda PDF is a perfect software tool to use when dealing with PDFs and the need to convert. Cons: It is not free, but it is worth the minimal fees.
Joomla sendinblue. SendinBlue is a versatile digital marketing platform for growing businesses. Scaling from email to advanced, multi-channel marketing, our tools were built with your growth and budget in mind. The SendinBlue package includes administrative component, subscriptions form module and marketing automation plug-in. First, Copy your API v3 key from your SendinBlue account following this tutorial. Then go to your Joomla admin, click on Components SendinBlue. On the SendinBlue dashboard, select the API key settings icon. Paste your API v3 key in the box.
Targeting Joe Cubicle
“This is an untargeted phishing campaign,” Bambenek told Threatpost. “They are not going after the most sophisticated users. They are going after Joe Cubicle that may not think twice about entering credentials to unlock a PDF.”
Scam Me If You Can Pdf Free Download Free
The SANS post offers no information about the scope of this attack. Bambenek said, however, that SANS has been forwarded a number of these particular emails in the past few days from across the country.
Scam Me If You Can Pdf Free Download Windows 10
Users should be careful not to open emails from unfamiliar domains. Additionally, remember that encrypted PDF documents are not typically locked behind a login screen.