Threat Alert: JOB-OFFER THEMED Phishing Email Steals Personal Information

• A series of phishing attacks are purporting to offer a part-time job running errands.
• The lure contains a description of the work as well as prompts for the recipient’s personal information.
• While the lures appear to come from an individual based in the United States, the email’s sending address comes from a Japanese domain.
• The lures claim once the personal information is received, the employer will send the first week’s payment.
• These lures are likely intended to lead to business email compromise (BEC) attacks

Key Action: Report Suspicious Emails 

• Remain alert to phishing indicators. Mismatches between sending addresses and an organization’s name are always warning signs.
• Beware of “too good to be true” offers. Recruiters may reach out about job opportunities through email. But if you are asked to provide sensitive information, it’s almost certainly a scam.
• Remember cybercriminals take advantage of strong emotions. An email promising work and almost immediate pay can be highly tempting, and cybercriminals try to capitalize on strong emotions.
• Report ANY suspicious emails using the Phish Alarm button.