I am a Certified Information Systems Auditor. I’m Certified in Risk and Information Security Controls, I’ve been working in the IT Governance and Compliance space for the better part of 20 years, have taken organizations through ISO27001 and SSAE 16 certifications, yet without INKY’s Phish Fence would have struggled to recognize today’s “Catch of the Day”.
It is said that that the only things in life that are guaranteed are death and taxes, and with the end of year hurtling towards us, tax season is underway. I can barely remember when my birthday is, but April 15th is a date that never slips any of our minds. The phishing attack we’re sharing today is a clever attempt at domain spoofing, and plays off the victim’s anxieties by amping up the fear that their TurboTax account has been compromised.
When you hear an anecdotal story of a distant acquaintance being snagged by a Phishing attempt it often conjures a questioning of their smarts, but friends there is little about today’s catch that even the most phishing aware would immediately spot, further as we’ll show below, Phish Fence caught this beauty long before anyone else even noticed.
I’ve been around technology in the professional sense for about 20 years. As a wee nipper I wrote my first program on my tape drive Amstrad CPC464 in 1987. I made a stick figure run across the screen, he would only ever get halfway though, a bit like me on a jog, but I digress.
“I took a screenshot through the camera of your device, synchronizing with what you are watching... I think that you do not want all your contacts to get these files, right? If you are of the same opinion, then I think that $811 is quite a fair price to destroy the dirt I created.”