Reputable and hardly suspicious – that’s how phishing emails, which have been circulating for several months and which allegedly come from Amazon, reach the mailboxes of many users. The reason for this is that those emails do not appear to be a cunning fraud but quite the opposite. They are so good in copying the design of a real Amazon email that they are hardly indistinguishable for end users. In addition, the cybercriminals use a personalized form of address in these phishing emails, which adds weight to the credibility of the email.
Example of such an Amazon phishing email (Click to enlarge image).
A phishing email personalized in this way is referred to as a “spear phishing attack”. These targeted attacks aim specifically at a single person or group of people. The behavior and personal data of target persons are spotted in advance in order to personalize the spear-phishing email the best possible way. Those fraud emails can only be identified through the sender address with which they were sent. These can, for example, be as follows:
- mail@ama-aktualisierung-2017.site
- sicherheit@amazon.de
- info@amazon.hr
- info@amazon.si
- kundenservice@onlinehome.de
More detailed information about possible sender addresses, the structure of phishing emails and content can be found here.
Stay in touch
Sign up to get the latest News about Cloud Security.
Oops! We could not locate your form.
