Recently, a widespread scam has affected over 7,300 businesses and 40,000 individuals globally, with the United States and the European Union being the hardest hit regions.
Cybercriminals have compromised legitimate accounts from the travel agency Riya to send fraudulent emails that look like they come from trusted sources. These emails often contain malicious links or attachments designed to steal personal information, such as login credentials and financial details. The messages exploit popular trends and well-known brands to appeal to potential victims.
This is not the first time that travel or consumer staples websites have been compromised, leading to a series of targeted phishing campaigns. Last year, individuals lost more than $1.1 billion to scams that pretended to be from businesses or government agencies.
Takeaways:
- Be Skeptical of Unsolicited Emails: If you receive an unexpected email, especially from a travel agency or company, verify the sender's address carefully. Avoid clicking on links or downloading attachments from these messages
- Protect Personal Information: Never share sensitive details like login credentials, financial information, or personal data via email. Legitimate companies will not ask for such information through email
- Verify Brand Communications: If you receive an email from a company, contact them directly through their official website or verified customer service channels to confirm the communication's legitimacy. Do not use contact information provided in suspicious emails
- #ALTACyber
------------------------------
Genady Vishnevetsky
Chief Info Security Officer
Stewart Title Guaranty Company
Houston TX
------------------------------