Stephen Ferrell

Stephen Ferrell

Recent Posts

Catch of The Day Insuphishent Funds

Posted by Stephen Ferrell

How to Spot a Fraudulent Email 

How fraudulent is this email? Let us count the ways! It looks harmless and seems to be from your payroll company, kindly alerting you about insufficient funds. The email sender is “Intuit Payroll Services”, and the email bears the Intuit logo and company trademark notes. Maybe there is more information in the attachment... Wait, don’t open that! 

Read More

Topics: phishing attack, phishing attempt, catch of the day, email security

It Does No Good to Implement an Email Security Solution After An Attack

Posted by Stephen Ferrell

Before people put locks on doors - there was the day before people put locks on doors. ‘The day before’ likely ended up with more than a few household goods getting crated off down the street.

Read More

Topics: phishing attack, email security

The Best Phishing Trips of 2018

Posted by Stephen Ferrell

The past does not define our future, but it often predicts it. That’s why INKY is the perpetual student. She is in a constant cycle of learning, becoming more powerful with every email she reads and every phish she catches. 2018 was a banner year for INKY literally and figuratively. Our phish fence solution caught tens of thousands of phishing attempts, in some cases hours before they had been flagged by the phishing aggregators. We’ve filleted a few of our favorite 2018 phish for you because as sure as the ocean is blue the attacks of 2018 will return in 2019 repackaged, repurposed, and more conniving than ever. INKY is ready. Are you?

Read More

Topics: phishing email examples

Catch of the Day: Today's Flavor is FedEx Tracking

Posted by Stephen Ferrell

Product placement in the movies and on TV has been with us from the early days. It used to be extremely overt and in your face. Much like phishing attacks, product placement has grown more covert. It’s still exists but is subtler by implanting itself in our subconscious and is cleverly woven into story lines and subplots without us knowing it’s there. Our subconscious is exactly where cyber criminals often set their phishing trap.

Read More

Topics: phishing email examples, phishing attempt, catch of the day, brand forgery

Too Many Phish in the Digital Sea

Posted by Stephen Ferrell

What is phishing? It’s a great question. Chances are, since the day you’ve had an email address, someone somewhere has been trying to phish you. Phishing is a modern twist on the classic sleight of hand. Sometimes it’s an aggressive assault meant to unbalance you, scare you, and prompt you to act irrationally, but often it’s a careful, less-obvious attempt to cajole you to share account information or click a link.

Read More

Topics: email scam

Catch of the Day: Amazon Shoppers Nearly Fall Prey

Posted by Stephen Ferrell

I have three Alexa’s and tend to buy everything I possibly can from Amazon. You name it I’ve bought it! So getting ‘order’ and ‘delivery’ notification emails from the big A are a daily norm in my inbox. I would bet that for most of you, it is the same. In the last week, I had two Amazon packages ‘delivered’ that didn’t actually make it inside my house -  I have since installed a video doorbell and I’m ready to catch whoever has been stealing my pork rub and vintage GI Joe’s!

Read More

Topics: phishing attempt, catch of the day, brand forgery

Catch of the Day: The Amazon Holiday Grinch

Posted by Stephen Ferrell

How many boxes are piling up at your front door? I will confess I now have three Alexa’s and have accidentally setup a subscription for AA batteries. If you ever need batteries, I’m your man. With the North Pole’s recent Reindeer weight, and carriage regulations Santa is now required to send 90% of his Christmas deliveries from Amazon directly.

Read More

Topics: catch of the day

Nobody is Safe From Spear Phishing Attacks

Posted by Stephen Ferrell

 According to statista.com IT Security spending in 2018 in the United States alone will reach $66B - an incredible number.

Read More

Topics: phishing solution, business reputation, phishing emails, phishing attack, phishing attempt

Intuit TurboTax Scams Are Back!

Posted by Stephen Ferrell

It is said that that the only things in life that are guaranteed are death and taxes, and with the end of year hurtling towards us, tax season is underway. I can barely remember when my birthday is, but April 15th is a date that never slips any of our minds. The phishing attack we’re sharing today is a clever attempt at domain spoofing, and plays off the victim’s anxieties by amping up the fear that their TurboTax account has been compromised.

Read More

Topics: spear phishing, phishing solution, phishing email examples, phishing attempt, email scam, domain spoofing

Catch of The Day: Malware-laden Thanksgiving Cards

Posted by Stephen Ferrell

Imagine scanning your inbox and seeing a “Thanksgiving Greetings” email from your boss. How sweet! What a nice break between everyday messages to read a short email wishing you Thanksgiving Greetings. The email has an attachment called “Greeting Card 2018.”  Maybe this card has a picture of the new puppy, or their beach house? ...

Read More

Topics: phishing email examples, phishing attack, phishing attempt, domain spoofing, catch of the day

Not So Wells Fargo: A Stinky Phish Story

Posted by Stephen Ferrell

When you hear an anecdotal story of a distant acquaintance being snagged by a Phishing attempt it often conjures a questioning of their smarts, but friends there is little about today’s catch that even the most phishing aware would immediately spot, further as we’ll show below, Phish Fence caught this beauty long before anyone else even noticed.  

Read More

Topics: phishing email examples, phishing attempt, email scam, catch of the day

Who Would Steal from a Charity? Cybercriminals

Posted by Stephen Ferrell

I’ve been around technology in the professional sense for about 20 years. As a wee nipper I wrote my first program on my tape drive Amstrad CPC464 in 1987. I made a stick figure run across the screen, he would only ever get halfway though, a bit like me on a jog, but I digress.

Read More

Topics: spear phishing, phishing email examples, email scam, domain spoofing

Catch of the Day: Zero Day = Zero Font Attack

Posted by Stephen Ferrell

I can’t resist writing this blog!! Today’s Catch of the Day falls under one of the many tactics that cyber criminals utilize to bait users into taking action. 

Read More

Topics: phishing email examples, phishing attack, phishing attempt, domain spoofing, catch of the day

Phishing Extortion Scam - Bitcoin Blackmail Blocked

Posted by Stephen Ferrell

“I took a screenshot through the camera of your device, synchronizing with what you are watching... I think that you do not want all your contacts to get these files, right? If you are of the same opinion, then I think that $811 is quite a fair price to destroy the dirt I created.”

Read More

Topics: phishing, phishing solution, business reputation, phishing emails, phishing attack, phishing attempt, email scam

Catch of the Day: Phishing attack gets shut down with INKY phish fence

Posted by Stephen Ferrell

The United States Postal Service, they drive on the right, and as the saying goes; neither snow nor rain nor heat nor gloom of night stays these couriers from the swift completion of their appointed rounds. I must be honest, things do breakdown a bit when it snows. That said, of all our much-maligned public services is there any group of people we trust more than the United States Postal Service? When was the last time you lost a letter or had a package compromised? It’s with that backdrop of trust that today’s catch of day arrives…

Read More

Topics: phishing solution, phishing email examples, phishing attack, catch of the day