Example Phish 002
Quote
“Sharing the fun of fishing turns strangers into friends in a few hours.” – Eugene Clark
What to learn from this phish...
From address can't be trusted.
- The below is an actual, legitimate address Amazon uses. This can be replaced inside the email and faked very easily.
-
Allow-listing needs to be used with caution for this very reason, especially if the users themselves have "Allow-listing" capabilities.
-
If the user who receives this message has the From address allow-listed in their spam filter it would allow the message to bypass some checks, including a link check.
Hover over links before you click.
- By hovering over the link, you can idenfity the target and see it does not go to Amazon.com.
