Please be aware, the style of phishing attempt shown above has been sent to organizations in Missouri via compromised valid email accounts.
Phishing Email: “You’re Invited” which may be customized and sent from a known and valid compromised account. Sender/subject/contents/link may change.
Threat: After clicking on the link in the email, the user is prompted to install/allow ScreenConnect software. This software allows the attacker to independently navigate the victim’s computer.
Attackers may utilize this method to:
- Steal credentials
- Purchase gift cards
- Download contacts
- Access sensitive data
- Install additional software
- Send additional phishing attempts to victims’ contacts
Security Measures to Help Protect Your Organization
- Restrict user rights to install software.
- Block unneeded remote desktop software through tools such as Akamai SIA, firewall, EDR, etc.
- Continue to reinforce messaging regarding verifying with the sender by another means (ex: phone call) before clicking any email links.
As always, if you have questions or would like assistance, our technical team is here to help.