Hey guys.
So, last evening, I got an email from Ebox explaining that they made modification to their payment system and they have deleted all customers’ card for security purpose and asked us to re-enter them. While that was good that they deleted them, it created the typical phishing email scenario. To make matters worse, the email could really be mistaken for a phishing attempt. Here it is:
Title:
ACTION REQUIRED: An Important Communication Was Posted to Your Customer Zone
Body (screenshot of English portion only):
As you can see, this can ring a lot of red flags for people on the lookout and avoiding phishing scams!
- Urgency to act
- Email is not addressed to anybody in particular - although it’s best practice to add “Hello Mr. (Last Name)”, not everyone does.
- Offers a link instead of asking you to manually go to their websites (like bank emails do)
So, I went there and it was real. I re-added my credit card and all was good.
There was also that message upon loging in that linked to a PDF with more information (although not really that much more). Here it is:
Discuss… I’m just the messenger here.