Protecting Yourself from Phishing Scams: A Personal Experience

TrainMyParent.com
Oct 22
2 min read

Updated: Nov 13

Understanding Phishing Emails

Yesterday, I received an email that slipped past our usual screening process. This isn't uncommon, but it serves as a reminder to be cautious with unexpected emails. Always take a moment to review them before clicking any links.

A phishing email from nifty.com saying that we have voicemail to hear. — TrainMyParent.com was replaced with Yourcompany in the above picture of the email we received.

This particular phishing email arrived in our corporate inbox from "Trainmyparent@nifty.com." It claimed there was a voicemail waiting for us. However, we know that TrainMyParent.com doesn’t use any third-party voicemail systems. This raised a red flag. It was either a phishing attempt, a malware injection, or just poorly crafted spam.

The Credibility Factor

Nifty.com is one of Japan's largest Internet Service Providers and a subsidiary of Fujitsu. This association lends some credibility to the email. At first glance, it looked professional. There were no misspellings, and it lacked the typical urgency that often signals a phishing attempt.

However, the "Listen Now" button didn’t link to nifty.com. Instead, it directed to a long, encoded URL within the serviceautopilot.com domain. This site is used by lawn care, cleaning, and snow removal businesses. It certainly isn’t a voicemail service.

Investigating the Threat

A quick check of the target domain on PhishTank.com showed no results. However, VirusTotal.com flagged it as a potentially malicious URL. We had no intention of clicking it anyway. It seems likely that a bot has compromised the serviceautopilot.com server, using it to spread malware or ransomware until the IT staff can clean it up.

Always Review Before You Click

It's crucial to examine links and buttons before clicking. Always check where a link will take you. Does it seem legitimate? Does the situation make sense? This malware attempt bypassed our email filters because it was new. However, the claim of receiving a voicemail from one of our own servers was suspicious. Always think before you click!

Empowering Yourself Against Scams

To protect yourself and your loved ones, consider enrolling in the Complete Internet Security Basics and Phishing Awareness Course for Parents on TrainMyParent.com. This course is designed to equip you with essential digital safety skills.

Conclusion

Staying safe online requires vigilance. Phishing scams are becoming more sophisticated, but with the right knowledge, you can protect yourself. Remember, if something seems off, trust your instincts.

Interested in more tips? Sign up and subscribe to our newsletter!