Is this the most dangerous phishing scam yet?

Imagine this scenario: You are checking your emails during your daily routine, and you suddenly receive a message from a company you trust.

You think it is safe to read, but hold on just a second. This email is not what it appears to be. It is part of a new scam called “SubdoMailing” that cybercriminals have created to trick you into clicking on malicious links or revealing sensitive information.

What is SubdoMailing?

Similar to regular phishing attacks, cybercriminals disguise themselves as trusted brands. However, in this case, they search for subdomains of reputable companies. These are the extra bits in a web address that come before the main domain, such as experience.trustedbrand.com. The ‘experience’ bit is the subdomain.

The cybercriminals find a subdomain that the brand is no longer using and is still pointing to an external domain that is no longer registered. They then buy the domain and set up the scam website. Therefore, you think you are clicking on experience.trustedbrand.com, but it automatically redirects you to scamwebsite.com. These criminals are sending out five million emails every day, targeting people in businesses just like yours.

As these emails seem like they are coming from a legitimate source, they often bypass the standard security checks and end up in your inbox.

To keep you and your data safe, here is our advice:

Always be cautious of any emails that appear suspicious, and if something looks strange, it probably is. Before clicking on any links or downloading attachments, take a moment to verify the sender. Look out for red flags like spelling mistakes or unusual email addresses.

Ensure that your employees understand the latest phishing tactics and are aware of how to recognise a scam. A little knowledge can go a long way in safeguarding your business.

Consider investing in top-notch security software to protect your company from cybercriminals. It might seem like an extra expense, but trust us; it’s worth it.

If you need any help with email security or any other aspect of your business, please don’t hesitate to get in touch.