The best defence is knowing what tricks they use. If you open the PDF and click on one of the links it will take you to a spoof web page in the same way a malicious link in a phishing email will.Ĭybercriminals are crafty. Instead of adding malicious links to an email that some email gateways can detect and quarantine, they have been including them in PDF files.

Running the file through a security analyser shows that it is likely a keystroke sniffer, i.e., if your computer is infected with this malware it will steal login credentials and other data as you type it in.Ĭybercriminals have also been using PDF’s recently as a means to help evade detection. This one is most definitely a malware carrier. PDF attachments in phishing emails are usually one of two things? “Check the activity of the last your account, things as we found its the activity of suspicious in the account.”Īgain, the wording is badly composed and grammatically incorrect. Once the email is opened, you see a PDF attachment. Notably, the title is not constructed well and doesn’t quite make sense.Įven with these clues you may not notice the signs as you worry about your account being compromised – we are all human and fallible it is this fact that cybercriminals rely on. “The latest issue of the account activity has been updated and received” It purports to be a service email from an Apple account with the title: The sender’s email address was clearly not an Apple email The email uses the tricks of urgency and concern to encourage you to open an attachment.There were several clues that this email was less than legitimate. The scam is based on the old attachment trick, here’s what it looks like and what hidden gems are in our phishing email of the week. This week’s scammers have not let us down. Even if they can only get you into ‘ not quite sure’ mode they may be able to execute their cunning plan this being usually to get you to click on a link or download an attachment.

Cybercriminals are always on the lookout for ways to trick you into believing something is legitimate.

Spotify receipt pdf scam