“Hi Karen , this is HR. You can now log anonymous complaints about IT, by logging into this external website with your company credentials. We provide this for your security because IT is able to monitor in network communication.”
You guys are killing me! I know so many people who get their Facebook profiles hacked like this. It just cracks me up because it seems silly to fall for. It always looks wrong and the address is ridiculous.
on some level, scammers are deliberating targeting the easiest marks. If you send out millions of phishing emails, you’re looking to catch a dozen or so of the least tech savvy people you can.
And it’s a cheap net to use. If I were to lose all sense of morals, I could buy a list of 1 million emails for very little money. Crafting and sending an email to each of those emails would essentially be free. (There’s some cost involved, but it would be very low.)
If I got a 1/100th of 1% reply rate, that’s 100 victims. Get $1,000 from each of them and you’ve got yourself a tidy profit.
Thankfully, there are spam filters and other technologies that can reduce the success rate, but it’s so cheap to send all those emails that pretty much any success can result in profit. And as long as it is profitable, spammers will keep sending out their messages.
“Hi Karen , this is HR. You can now log anonymous complaints about IT, by logging into this external website with your company credentials. We provide this for your security because IT is able to monitor in network communication.”
You guys are killing me! I know so many people who get their Facebook profiles hacked like this. It just cracks me up because it seems silly to fall for. It always looks wrong and the address is ridiculous.
on some level, scammers are deliberating targeting the easiest marks. If you send out millions of phishing emails, you’re looking to catch a dozen or so of the least tech savvy people you can.
That’s true cast, a big net I guess.
And it’s a cheap net to use. If I were to lose all sense of morals, I could buy a list of 1 million emails for very little money. Crafting and sending an email to each of those emails would essentially be free. (There’s some cost involved, but it would be very low.)
If I got a 1/100th of 1% reply rate, that’s 100 victims. Get $1,000 from each of them and you’ve got yourself a tidy profit.
Thankfully, there are spam filters and other technologies that can reduce the success rate, but it’s so cheap to send all those emails that pretty much any success can result in profit. And as long as it is profitable, spammers will keep sending out their messages.
There are legitimate third party services for company to receive anonymous ethics complains, or to poll employees pseudo-anonymously.
If done well it’s not using the company credentials.
But it would indeed a sneaky way to fish employees.
Legitimate? Anything like that is at least one of two kinds of painfully obvious trap, namely: