4 ms·

Yep. Definitely lawyers (specifically those involved in high value transactions) are targeted. All you need to do is convince one of their customers that you a

by mvc 5y ago

Yep. Definitely lawyers (specifically those involved in high value transactions) are targeted. All you need to do is convince one of their customers that you are speaking on behalf of the lawyer and get them to send the money to you instead. I know this because I've been a victim of this attack. Not sure how you'd monetize patient/doctor communications in the same way but I'm sure someone could think of something.

ChuckNorris89 5y ago
>All you need to do is convince one of their customers that you are speaking on behalf of the lawyer and get them to send the money to you instead. I know this because I've been a victim of this attack. IIRC, there was a guy who was sending letters to the finance department of big tech companies and was claiming to be the CEO and that they had to make various payments to his accounts, and they were paying him without anyone at the company questioning this. He got away with millions before getting caught and he wasn't part of some crime group but some random guy sending letters from home, lol. Maybe people should be trained in snail mail phishing detection too.
- deleted 5y ago
  [deleted]
- mvc 5y ago
  > Maybe people should be trained in snail mail phishing detection too. This attack would might be even more effective as snail mail actually because in my case, that's where the official notification of recipient account was supposed to be delivered (and was a couple days later). If you can sleuth the email comms to find an address, you'd probably send the fake info to both. To protect yourself from this attack, always, always, always speak with person to get the account details to which you're sending a large amount of money. Preferably face to face.
fragmede 5y ago
Spear-phishing is the industry term for that, where the attack is specialized towards a specific target and not a mass-mail phishing attempt.

by mvc 5y ago

ChuckNorris89 5y ago

>All you need to do is convince one of their customers that you are speaking on behalf of the lawyer and get them to send the money to you instead. I know this because I've been a victim of this attack. IIRC, there was a guy who was sending letters to the finance department of big tech companies and was claiming to be the CEO and that they had to make various payments to his accounts, and they were paying him without anyone at the company questioning this. He got away with millions before getting caught and he wasn't part of some crime group but some random guy sending letters from home, lol. Maybe people should be trained in snail mail phishing detection too.

deleted 5y ago
[deleted]
mvc 5y ago
> Maybe people should be trained in snail mail phishing detection too. This attack would might be even more effective as snail mail actually because in my case, that's where the official notification of recipient account was supposed to be delivered (and was a couple days later). If you can sleuth the email comms to find an address, you'd probably send the fake info to both. To protect yourself from this attack, always, always, always speak with person to get the account details to which you're sending a large amount of money. Preferably face to face.

fragmede 5y ago

Spear-phishing is the industry term for that, where the attack is specialized towards a specific target and not a mass-mail phishing attempt.