Phishing scam: Malicious messages are delivered to unsuspecting users and aim to illegally collect credentials for web-based services and e-mail, using a trick that can fool recipients into believing that the messages are about Dropbox.
A link in the body of the message claims to lead to "urgent and top-secret" files that can be downloaded via the Dropbox.
Of course, the perpetrators are aiming to steal credentials (phishing) from various webmail services. However, the URL leads to a scam page that displays logos of many popular webmail services such as Outlook, Gmail, and Yahoo and asks you to log in to access important files.
By clicking on any of the logos, you are redirected to a fake login page for each provider, where the information you fill in the fields is sent directly to cyber-criminals!
Users who have some kind of two-factor authentication for their services are safe as this security model ensures access to an account only by verifying a second code sent to a device designated by the user himself, e.g. his mobile phone.
According to Hoax Slayer, scammers have cast a wide net tofishcredentials from other email services that are not as popular, as they include an option for general email services as well.
Some e‑mail services offer protection against such scams by sending notifications for possible unauthorized activity, if an attempt to access the account is made from a location or computer that has not been used before. In this case a link to change the password is delivered to the user.
The scam is not new, but the scammers behind it often change the content of the message and adapt it to current trends.
The pattern that is followed ’ this case is somewhat classic, vague details regarding the content offered, but clear information regarding the urgent nature for access where it is requested.
When you encounter such a message, you should take some time and analyze the "signs" to determine if it is indeed a scam. Legitimate communication from a service provides clear information and refers to the user by the name they provided when registering. The lack of this element should be considered suspicious and initiate procedures for further investigation, such as taking a look at the sender's address...
