Some examples I have seen: Starbucks.marketingmagic.com (they copied a legitimate Starbucks email and pasted into a message, so it looked like the real thing) and FedEx.invoice234.com... this is common and I get it every week. The copy a fake FedEx invoice into the email and tell them I owe them a shipping charge of $000.00 before my shipment will be delivered. Same with Amazon phishing scams.
It's easy to get lazy, especially in email. My IT department occasionally sends out phishing emails to give a lecture when we click them, and I was caught recently. I thought I was clicking on a LinkedIn invite from someone in my company, but it was a fake website they had set up. I got busted. 😣
The HR Department is not your friend.
So, office mate and I are well schooled at identifying phish-mails.
We give each other heads up on company generated emails that we are supposed to report using the app on the Outlook ribbon.
I’m usually the first, so I click on the App and tell my co-workers about the “gotchya” attempt.
Office buddy simply deletes the email.
Boss calls him up last week and says, “It’s policy to report these fake emails. You need to start doing that from now on.”
\Policy\ to participate in fakery devised by IT and HR.
Do it or get disciplined, comrade.
Oh, don’t worry, I have not given any credit card info. Thanks, though, for your advice.
Which site is a phishing site?