![\"Scam\"](\"http:\/\/kinetics.co.nz\/wp-content\/uploads\/2015\/09\/Scam1.png\")
<\/p>\nThere’s yet another new, and nasty, ‘phishing’ attack doing the rounds.\u00a0\u00a0 We’ve heard it called SpearPhishing, or Whaling.\u00a0 Here’s how it works.<\/p>\n
The villains research the name of your CEO and your accountant\/CFO.\u00a0 This is often just a matter of looking on your website for the names.\u00a0 Then they send the accountant an email, pretending to be from the CFO.<\/p>\n
They are very clever at how they spoof this, picking an email address that’s close enough to be legitimate that you are fooled unless you look really carefully.\u00a0\u00a0 The CFO replies – the (fake) ‘CEO’ responds with the necessary details and confirms the instructions.\u00a0 The poor accountant thinks they are getting a legitimate instruction from the CEO.\u00a0 Here’s an example we saw last week from a client (read it from the bottom up)<\/p>\n
These villains are very clever.\u00a0 The emails look credible, especially given that they purport to come from something like an iPad, that means the reader forgives the poor formatting and spelling errors.\u00a0 The messaging is credible, but the dollar amount is enough to raise flags.\u00a0 Imagine if it were a smaller amount!<\/p>\n