Weekly Tip! New Alert! Cybercriminal at Your Door

Ring is a popular brand of security cameras designed for home safety. Unfortunately, Ring customers were the latest victims of a phishing attack. Cybercriminals sent phishing emails spoofed as Ring to try and steal customers’ sensitive information.

Cybercriminals start this attack by sending you a phishing email with an HTML file attached. The email looks like it’s from Ring, and it instructs you to open the file to update your Ring membership. If you click this file, you’ll be redirected to a malicious website that spoofs Ring’s login page. This website prompts you to enter sensitive information, such as your credit card number and social security number. If you enter your information, you’ll be redirected to Ring’s legitimate website, making the email look more real.

Follow the tips below to stay safe from similar scams:

- Never click a link or download an attachment in an email that you aren’t expecting. 

- If you receive an email claiming that you need to make changes in your account, always log in to the organization’s website directly.

- Remember that this type of attack isn’t exclusive to Ring. Cybercriminals could use this technique to impersonate any type of service. 

The KnowBe4 Security Team
KnowBe4.com

• Related Articles

• Weekly Tip! IT or Cybercriminal?

  Coinbase, a cryptocurrency platform, was the latest victim of a social engineering attack. Social engineering occurs when cybercriminals manipulate you to try to steal your sensitive information. In this recent attack, a cybercriminal sent smishing ...

• Weekly Tip! Zelle Fraud Alert Scams

  Zelle is a popular mobile payment application that allows users to send payments to one another. Like most financial institutions, Zelle alerts users of possible fraud to stop suspicious account activity from happening. However, not all fraud alerts ...

• New Hotel Employee Onboarding Guide

  The New Hotel Employee Onboarding Guide is a turnkey, guided process. It is designed to provide suggested steps and best practices to take your newest team members from a Pre-hire status to a Hired status, then, from being Onboarded to Trained. The ...

• Weekly Tip! Interview with a Cybercriminal

  Recently, Google’s Threat Analysis Group (TAG) published a report about a new tactic that cybercriminals are using in spear phishing attacks. Spear phishing is when cybercriminals send targeted emails impersonating someone you trust to try to steal ...

• Weekly Tip! EvilProxy and URLs

  About a week ago, researchers uncovered a new "phishing-for-hire" tool called EvilProxy. The tool sends standard phishing emails to recipients, but it implements some advanced hacking techniques to dramatically increase the odds of taking over your ...