What is phishing? It’s a great question. Chances are, since the day you’ve had an email address, someone somewhere has been trying to phish you. Phishing is a modern twist on the classic sleight of hand. Sometimes it’s an aggressive assault meant to unbalance you, scare you, and prompt you to act irrationally, but often it’s a careful, less-obvious attempt to cajole you to share account information or click a link.
I am a Certified Information Systems Auditor. I’m Certified in Risk and Information Security Controls, I’ve been working in the IT Governance and Compliance space for the better part of 20 years, have taken organizations through ISO27001 and SSAE 16 certifications, yet without INKY’s Phish Fence would have struggled to recognize today’s “Catch of the Day”.
It is said that that the only things in life that are guaranteed are death and taxes, and with the end of year hurtling towards us, tax season is underway. I can barely remember when my birthday is, but April 15th is a date that never slips any of our minds. The phishing attack we’re sharing today is a clever attempt at domain spoofing, and plays off the victim’s anxieties by amping up the fear that their TurboTax account has been compromised.
When you hear an anecdotal story of a distant acquaintance being snagged by a Phishing attempt it often conjures a questioning of their smarts, but friends there is little about today’s catch that even the most phishing aware would immediately spot, further as we’ll show below, Phish Fence caught this beauty long before anyone else even noticed.
I’ve been around technology in the professional sense for about 20 years. As a wee nipper I wrote my first program on my tape drive Amstrad CPC464 in 1987. I made a stick figure run across the screen, he would only ever get halfway though, a bit like me on a jog, but I digress.
“I took a screenshot through the camera of your device, synchronizing with what you are watching... I think that you do not want all your contacts to get these files, right? If you are of the same opinion, then I think that $811 is quite a fair price to destroy the dirt I created.”