[et_pb_section fb_built=”1″ _builder_version=”4.9.2″ _module_preset=”default”][et_pb_row column_structure=”1_2,1_2″ _builder_version=”4.9.2″ _module_preset=”default”][et_pb_column type=”1_2″ _builder_version=”4.9.2″ _module_preset=”default”][et_pb_text _builder_version=”4.9.2″ _module_preset=”default” hover_enabled=”0″ sticky_enabled=”0″]<\/p>\n
We’re seeing this phishing attack over and over this week.<\/p>\n
Your first clue that something is wrong is it doesn’t look like voicemail emails you might typically receive.\u00a0 Unless you have a brand new voicemail\/phone system these shouldn’t change format!<\/p>\n
The second clue is that it’s an HTML file.\u00a0 That should make you wonder.<\/p>\n
It’s actually quite clever because as an HTML file, it opens in your webbrowser, which then connects to a webserver and executes code from that website.\u00a0 The actual attachment itself doesn’t have any bad code, so your basic antivirus will PASS it<\/strong>.\u00a0 It’s the website it takes you to that does the harm.<\/p>\n The nasty business is that it takes you to a Office 365 login page, harvests your login details and uses those to cause more harm.<\/p>\n [\/et_pb_text][\/et_pb_column][et_pb_column type=”1_2″ _builder_version=”4.9.2″ _module_preset=”default”][et_pb_image src=”http:\/\/kinetics.co.nz\/wp-content\/uploads\/2021\/03\/FakeVM.jpg” title_text=”FakeVM” _builder_version=”4.9.2″ _module_preset=”default”][\/et_pb_image][\/et_pb_column][\/et_pb_row][et_pb_row _builder_version=”4.9.2″ _module_preset=”default”][et_pb_column type=”4_4″ _builder_version=”4.9.2″ _module_preset=”default”][et_pb_text _builder_version=”4.9.2″ _module_preset=”default” custom_padding=”0px|||||” hover_enabled=”0″ sticky_enabled=”0″]<\/p>\n We have been able to identify enough common elements in this to be able to block it for all organisations using KARE for Security.\u00a0 If you want to reduce your risks, check out our Cyber-Security solutions<\/a> or come to our next webinar on April 13<\/a><\/p>\n [\/et_pb_text][\/et_pb_column][\/et_pb_row][\/et_pb_section]<\/p>\n","protected":false},"excerpt":{"rendered":" We’re seeing this phishing attack over and over this week. Your first clue that something is wrong is it doesn’t look like voicemail emails you might typically receive.\u00a0 Unless you have a brand new voicemail\/phone system these shouldn’t change format! The second clue is that it’s an HTML file.\u00a0 That should make you wonder. It’s […]<\/p>\n","protected":false},"author":5,"featured_media":6912,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_et_pb_use_builder":"on","_et_pb_old_content":"","_et_gb_content_width":"","footnotes":""},"categories":[4],"tags":[],"class_list":["post-6908","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"_links":{"self":[{"href":"https:\/\/new.kinetics.co.nz\/index.php?rest_route=\/wp\/v2\/posts\/6908","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/new.kinetics.co.nz\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/new.kinetics.co.nz\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/new.kinetics.co.nz\/index.php?rest_route=\/wp\/v2\/users\/5"}],"replies":[{"embeddable":true,"href":"https:\/\/new.kinetics.co.nz\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=6908"}],"version-history":[{"count":0,"href":"https:\/\/new.kinetics.co.nz\/index.php?rest_route=\/wp\/v2\/posts\/6908\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/new.kinetics.co.nz\/index.php?rest_route=\/"}],"wp:attachment":[{"href":"https:\/\/new.kinetics.co.nz\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=6908"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/new.kinetics.co.nz\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=6908"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/new.kinetics.co.nz\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=6908"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}IF YOU SEE IT, DON’T OPEN THIS ATTACHMENT<\/h2>\n