See this one-word subject line in your inbox? It's a phishing scam red flag

Email scams often contain elaborate details to entice you into clicking a link or opening an attachment. Usually, there is some heartfelt backstory to why you must open that document or a severe threat of what will happen if you don’t.

These are relatively easy to spot as suspicious if they didn’t end up in your email spam folder. But scammers never stick to the same tactics. Malware is constantly developed to circumvent security measures.

Read on to see how a clever new phishing scheme makes it easier to spread malware.

Here’s the backstory

Emotet is a dangerous malware variant that started wreaking global havoc years ago. It was so devastating that international law enforcement agencies worked together to bring it down in early January of 2021.

It seemingly disappeared for good, only to show up again last November. The malware was once described as “the most dangerous malware botnet in existence” as it locks infected devices into a worldwide botnet system controlled by hackers.

But security researchers at Proofpoint discovered how the malware now tricks victims into opening a malicious attachment. Instead of a long-winded introduction or heartfelt plea, the latest tactic is a one-word subject line in the email.

Researchers noted that it simply read “Salary” or Payment” in most cases with an attachment in the email’s body. The one-word subject might entice people to open the email and click the link. But if you do, your device will be infected with malware.

Email phishing scam
Credit: Proofpoint

What you can do about it

The best thing you can do to protect yourself against cyberattacks is to be aware of the tactics used by criminals. Now that you know one-word subject emails with only a link in the body are dangerous, don’t click on the link.

Here are more ways to avoid falling victim to phishing attacks and keep your devices malware-free.

Continue reading

5 new steps you can take right now to stay safer online

The FBI recently reported a 400% increase in cyberattack complaints received since the start of the pandemic. If you haven’t given your devices and accounts a security checkup, now’s the time to do it.

Precautions like two-factor authentication and strong passwords are good places to start, but there are subtle tactics hackers can use against you even with these measures in place. Tap or click here to see a scam that targets 2FA codes.

Continue reading

Windows alert: Fake Office updates trick you into downloading malware

It’s rare for malware threats to stay the same. In fact, the more time that passes without addressing a threat, the more dangerous it becomes. That’s why early detection, patches and education are critical to protecting people from cyberattacks.

Continue reading

Billions of PC users at risk: Adult websites infected with malware

It should go without saying, but some websites are much more dangerous than others. Third-party app stores, for example, are home to tons of nasty malware and spam apps. But there’s no question that porn sites take the cake when it comes to malware and hacking risks.

Continue reading

Quick check to see if your email address was used to spread spam

Malware and spam are pretty common issues on the web. Most of us try our best to avoid infected sites, but it can be tough to do — especially when there are issues like Emotet to contend with. Bad actors behind Emotet are responsible for a storm of malware spread through spam emails that have been causing serious issues.

Continue reading

Dangerous malware has a new trick: Stealing your email attachments

It seems as if most of us are faced with a never-ending deluge of spam these days. Whether it comes in the form of emails or robocalls, there’s no escaping that the huxters of the web are using this period of global lockdown to bombard people stuck in their homes with junk advertising and scams.

Continue reading