{"id":85184,"date":"2017-11-20T17:37:37","date_gmt":"2017-11-20T12:07:37","guid":{"rendered":"https:\/\/blogs_admin.quickheal.com\/?p=85184"},"modified":"2017-11-20T20:44:56","modified_gmt":"2017-11-20T15:14:56","slug":"mumbai-businessman-loses-%e2%82%b95-8-lakh-spear-phishing-scam","status":"publish","type":"post","link":"https:\/\/www.quickheal.com\/blogs\/mumbai-businessman-loses-%e2%82%b95-8-lakh-spear-phishing-scam\/","title":{"rendered":"Mumbai businessman loses \u20b95.8 lakh in a spear phishing scam"},"content":{"rendered":"

This story has been sourced from Hindustan Times.<\/em><\/p>\n

On November 18, a businessman from Powai, Mumbai, received an email that looked like it was sent by a close friend. In the email, the friend informed that he is stuck somewhere and that he needed an urgent loan of \u20b95.8 lakh to be transferred into his bank account. Believing the email to be genuine, the businessman did as he was told. And later when he called up his friend to confirm the transfer, he realized that has was robbed.<\/p>\n

An FIR has been filed with the local police station. The police officer investigating the case told HT: \u201cThe fraudster did not give any specific reason for the loan. He just said that he was in urgent need of it.\u201d When asked if the friend\u2019s email id had been hacked into or a similar duplicate id had been created for the fraud, the officer said: \u201cWe are not aware of this. We are taking the help of cyber police officials for it.\u201d<\/p>\n

Source: https:\/\/www.hindustantimes.com\/mumbai-news\/businessman-in-mumbai-falls-prey-to-phishing-scam-loses-5-8-lakh\/story-N0LSZawCiGAbZL2NtoNAgP.html<\/p>\n

This incident is a classic case of what is known spear phishing. What is phishing<\/a>? <\/strong>Phishing is a fraudulent activity where a fraudster tries to trick people into revealing their sensitive and confidential information such as credit\/debit card numbers, bank account details, login ID and passwords, etc. And when a phishing attack is targeted towards a specific person or organization, it’s known as spear phishing.<\/p>\n

This is how most spear phishing attacks work?<\/strong><\/p>\n

\u2022 A scammer first acquires specific pieces of details of their target like who their friends are, where does the target stay, their employer, locations, any online store they recently visited, etc.<\/p>\n

\u2022 Using the above details, the scammer disguises themself as a trustworthy entity and sends personalized emails to the target.<\/p>\n

Spear phishing emails are highly targeted because they contain information that only pertain to the victim they are sent to.<\/p><\/blockquote>\n

\u2022 These emails might contain a link to a fake website, an attachment hiding a virus or simple instructions like the one mentioned in the case of the Powai businessman.<\/p>\n

How to protect yourself from spear phishing attacks?<\/strong><\/p>\n

\u2022 Avoid posting your personal information online. And even if you should, ensure it is only visible to people you trust.<\/p>\n

\u2022 Never respond to emails that carry a sense of urgency and asks you to take an action like clicking on a link, downloading an attachment or calling on a phone number.<\/p>\n

\u2022 If you receive an email that sounds urgent or important, call up the sender and verify the situation first – just like what the Powai business should have done in his case.<\/p>\n

\u2022 Be extra cautious with emails that talk about money or your bank accounts.<\/p>\n

\u2022 Use an antivirus<\/a> that automatically restricts access to phishing websites.<\/p>\n

 <\/p>\n

Image source:<\/p>\n

Home<\/a><\/p><\/blockquote>\n