Is This the Most Dangerous Phishing Scam Yet?

    April 10, 2024

    Imagine this: An email pops into your inbox, seemingly from a familiar business you trust.  You think, “Great! That’s safe to read,” as you click to open it. But what if that trust is a carefully crafted illusion?

    This is the alarming reality of SubdoMailing, yet another a cunning phishing scam that exploits trusted brands to steal your information. And it’s just as dangerous as it sounds.

    Just like regular phishing attacks, cyber criminals pretend to be trusted brands. But SubdoMailing takes phishing attacks to a whole new level of deception. Cybercriminals scour the internet for subdomains of reputable companies. You know those extra bits in a web address that come before the main domain? Such as in experience.trustedbrand.com, where that ‘experience’ bit is the subdomain.

    They find a subdomain no longer actively used by legitimate companies but still technically linked to an external domain that’s no longer registered. These criminals then capitalize on this gap by purchasing the dormant domain and setting up a scam website. So, when you click on experience.trustedbrand.com, you have no idea it automatically redirects to scamwebsite.com.

    The sheer legitimacy of the initial email address and the familiarity of the brand it impersonates makes SubdoMailing emails particularly dangerous. They often bypass standard security filters, landing unsuspectingly in your inbox and potentially leading you to reveal sensitive information or download malware.

    Cybercriminals are already sending 5 million of these emails daily, threatening businesses and individuals alike. Here’s how to stay safe:

    Maintain a Healthy Dose of Skepticism: Treat all emails with caution, especially those urging immediate action or containing unexpected attachments. If something feels off, it probably is.

    Verify, Verify, Verify: Before clicking on links or opening attachments, take a moment to verify the sender. Look for red flags like glaring typos or unusual email addresses.

    Educate Your Team: Knowledge is power. Make sure your employees are up to speed on the latest phishing tactics, including SubdoMailing.

    Invest in Security Software: Consider investing in top-notch security software that can detect and filter out malicious emails before they reach your inbox. This extra layer of protection can significantly reduce your risk.

    With the emergence of SubdoMailing, it’s clear now more than ever that even trusted brands can be weaponized by cybercriminals. By staying vigilant, verifying information, and investing in proper security measures, you can significantly reduce your chances of falling victim to this sophisticated scam. If you have any questions or need assistance with email security, don’t hesitate to reach out – we’re here to help!

    What Our Clients Say:

    • “I wish I would have called Gallico sooner because he came on-site and fixed my email issue immediately.”
    • “Gallico did a wonderful job getting our production company setup with an editing server. He was able to do the install in a timely manner and train us how to use it. Will be using him again in the future for sure.”
    • “Have used IT guys before and it was, “Maybe it is this. No, let me check this.” Not with TopMac. Knew exactly everything. No fumbling, no guessing. Very knowledgeable. Fast and efficient.”
    • “Wonderful experience with this company. Very efficient and experienced! My husband and I were so happy to have found them for all our IT needs.”

    Get Regular Updates:

    Sign up to receive the latest IT Updates from Apollo IT