A new campaign has emerged, designed by cybercriminals to trick Italian Post customers into handing over their personal information. However, experts from Sophos have identified the fake email, which uses some old but interesting techniques.
The emails are written in Italian, titled "Useful information about the new security system" and urge beneficiaries to download an attached form to complete the process.
To make it appear more legitimate, the fake Italian Post Office notification informs beneficiaries that to open the form they will need to use a password, which is included in the content of the email.
According to experts, this tactic can make the attack less successful, since users who haven't read the entire message and have scrolled down to open the attachment won't be able to access the phishing page. On the other hand, using a password can add some credibility to the scam.
Using a password could also prevent security software from detecting that the HTML file links to a malicious page.
