Weekly Tip! r/Cybercriminals: Spear Phishing

Reddit, a popular online community, was the latest victim of a spear phishing attack. Spear phishing is a targeted email attack that looks like it’s from a trusted source, but it’s actually from cybercriminals in disguise. 

In this recent attack, a cybercriminal set up a fake website designed to steal login credentials. Then, the cybercriminal sent phishing emails to Reddit employees. The emails prompted employees to visit the fake website and enter their credentials. Through this attack, the cybercriminal was able to access sensitive information from Reddit and steal internal company data. 

Follow the tips below to stay safe from similar scams:

- Make sure that the sender is actually who they say they are. If the sender claims to be someone you know, reach out to them in person or by phone to verify. 

- Remember that spear phishing attacks can happen to anyone. Think before you click, and never click a link in an email that you aren’t expecting. 

- Be careful with the information you share about yourself online. Cybercriminals can use this information to target you in phishing attacks.

The KnowBe4 Security Team
KnowBe4.com

• Related Articles

• Weekly Tip! Clone Phishing Scams

  Organizations often use email to send important information to their customers. If an organization sends out an email that’s missing information, they may send you a follow-up email. Now, cybercriminals are using a technique called “clone phishing” ...

• Weekly Tip! Google Translate Phishing Scams

  Google Translate is a free service that you can use to translate text from one language to another. Since Google Translate is a Google product, many people view it as a sign that a webpage is trustworthy. Now, cybercriminals are spoofing Google ...

• Weekly Tip! Blank Image Phishing Scams

  Most email providers have security filters that check emails for malicious links or attachments. You may feel like you can rely on these filters and, as a result, trust that emails sent to your inbox are safe. Unfortunately, cybercriminals can take ...

• Weekly Tip! Healthcare Reimbursement Phishing Scams

  When you request a reimbursement from your healthcare provider, it may be completed through a third-party payment processor. These payment processors often offer direct deposit payments so you can get reimbursed as soon as possible. Unfortunately, ...

• Weekly Tip! Homoglyph and Unicode Phishing Scams

  You may be wondering what homoglyphs and Unicodes are. Homoglyphs are letters or characters that look similar. For example, the character “e” looks similar to the character “ė”. Unicode is a unique code assigned to characters so that any platform or ...