FrankonFraud reported:
About 1,400 real order confirmations went out with a scam "helpline" typed where the customer's name should be. They pass every security check
because Dell and Staples really sent them.
Order systems repeat back whatever a customer types. Put a phone number in the name field and the store prints it in a signed, branded email.
Ship To and Bill To both read "Confirmed Order, Helpline 808 232 6397, Call Our Sales Team," with Dell's hometown of Round Rock, Texas, as the city.
Since Dell and Staples really sent the emails, there's no fake sender to catch. Talos says both passed DKIM and DMARC, the checks that prove where an email came from.
Order systems repeat back whatever a customer types. Put a phone number in the name field and the store prints it in a signed, branded email.
Ship To and Bill To both read "Confirmed Order, Helpline 808 232 6397, Call Our Sales Team," with Dell's hometown of Round Rock, Texas, as the city.
Since Dell and Staples really sent the emails, there's no fake sender to catch. Talos says both passed DKIM and DMARC, the checks that prove where an email came from.
Find the original article with examples of emails and even more companies included in the scams here.
Key Takeaway: Access companies included in the email via a saved bookmark on your system or via a password manager. Never click the link in the email.
Enroll in Training Sessions: Last Thursday of Every Month is Training on Frauds and New Scam Alerts and How to Combat
Enroll in Training Sessions: Last Thursday of Every Month is Training on Frauds and New Scam Alerts and How to Combat
Created with
